ScottGu's Blog - JSON Hijacking and How ASP.NET AJAX 1.0 Avoids these Attacks
Recently some reports have been issued by security researchers describing ways hackers can use the JSON wire format used by most popular AJAX frameworks to try and exploit cross domain scripts within browsers. Specifically, these attacks use HTTP GET requests invoked via an HTML <script src=""> include element to circumvent the "same origin policy" enforced by browsers (which limits JavaScript ob
ScottGu's Blog - New <%: %> Syntax for HTML Encoding Output in ASP.NET 4 (and ASP.NET MVC 2)
New <%: %> Syntax for HTML Encoding Output in ASP.NET 4 (and ASP.NET MVC 2) [In addition to blogging, I am also now using Twitter for quick updates and to share links. Follow me at: twitter.com/scottgu] This is the nineteenth in a series of blog posts I’m doing on the upcoming VS 2010 and .NET 4 release. Today’s post covers a small, but very useful, new syntax feature being introduced with ASP.NET
ScottGu's Blog - Important: ASP.NET Security Vulnerability
A few hours ago we released a Microsoft Security Advisory about a security vulnerability in ASP.NET. This vulnerability exists in all versions of ASP.NET. This vulnerability was publically disclosed late Friday at a security conference. We recommend that all customers immediately apply a workaround (described below) to prevent attackers from using this vulnerability against your ASP.NET applicat
Scott Weinstein on .Net - Intro to RX
Lab49 colleague Lee Campbell has a nice 7 part write-up on the Reactive Extensions He says: it is big in all sorts of ways: In the way that it tackles the Observer pattern is bold In the way it tackles concurrency is quite a shift from how I have done it before. The number of (extension) methods is huge. The way in which it integrates with LINQ to leverage LINQ's compensability & declarative style
ScottGu's Blog - Source Code for the Built-in ASP.NET 2.0 Providers Now Available for Download
Source Code for the Built-in ASP.NET 2.0 Providers Now Available for Download Today we released the source code for the built-in ASP.NET 2.0 Membership, Role Management, Site Navigation, Session State, Profile, Web Events, and Web Part Personalization providers (basically all of the built-in providers that ship in the .NET 2.0 Framework Redist). You can download them here, and learn more about th
Fredrik Normén - Silverlight 4 - MVVM with Commanding and WCF RIA Services
Note: The code example in this post uses Silverlight 4 PDC Beta and WCR RIA Services PDC Beta, so some changes can be made before RTM. In my previous post I wrote about “WCF RIA Services and a guide to use DTO/”Presentation Model””, and mention that I will later write a blog post about using a ViewModel. In this post I will show you how you can create a ViewModel and use Silverlight 4 Commanding t
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Paulo Morgado - What Is The .NET Framework 4.5?
Context is King - DateTime formatting extension method
Gunnar Peipman's ASP.NET blog - ASP.NET MVC 3 Beta: Built-in support for charts
Laurent Duveau - Learning WCF RIA Services
Scott's Blog - Guarding against CSRF Attacks in ASP.NET MVC2
Mehfuz's WebLog - A basic proxy for intercepting method calls (Part – 3)
Which ORM? LINQ To SQL, Entity Framework? LLBLGen? NHibernate?…? - Guru Stop