ChuckLu - 博客园

2021年9月7日

摘要： Using HTTP cookies An HTTP cookie (web cookie, browser cookie) is a small piece of data that a server sends to the user's web browser. The browser may 阅读全文

posted @ 2021-09-07 12:19 ChuckLu 阅读(58) 评论(0) 推荐(0)

How can I check that my cookies are only sent over encrypted https and not http?

摘要： How can I check that my cookies are only sent over encrypted https and not http? The cookies secure flag looks like this: secure; That's it. This shou 阅读全文

posted @ 2021-09-07 12:03 ChuckLu 阅读(48) 评论(0) 推荐(0)

ASP.NET MVC doesn't call global.asax' EndRequest

摘要： ASP.NET MVC doesn't call global.asax' EndRequest 回答1 The HttpApplication instance that is represented by your global.asax file is a single instance th 阅读全文

posted @ 2021-09-07 10:54 ChuckLu 阅读(36) 评论(0) 推荐(0)

HttpOnly

摘要： HttpOnly Overview The goal of this section is to introduce, discuss, and provide language specific mitigation techniques for HttpOnly. Who developed H 阅读全文

posted @ 2021-09-07 10:13 ChuckLu 阅读(212) 评论(0) 推荐(0)

Secure Cookie Attribute

摘要： Secure Cookie Attribute Overview The secure attribute is an option that can be set by the application server when sending a new cookie to the user wit 阅读全文

posted @ 2021-09-07 10:10 ChuckLu 阅读(273) 评论(0) 推荐(0)

2021年9月6日

CSV Injection

摘要： CSV Injection Author: Timo Goosen, Albinowax Contributor(s): kingthorin CSV Injection, also known as Formula Injection, occurs when websites embed unt 阅读全文

posted @ 2021-09-06 10:51 ChuckLu 阅读(102) 评论(0) 推荐(0)

2021年9月4日

Trouble Connecting to sql server Login failed. "The login is from an untrusted domain and cannot be used with Windows authentication"

摘要：配置单个数据库的权限的话 Security里面找到login，右键看属性找到UserMapping，找到对应的数据库，权限那边勾选db_user, db_reader和db_datawriter权限 Trouble Connecting to sql server Login failed. "T 阅读全文

posted @ 2021-09-04 14:48 ChuckLu 阅读(597) 评论(0) 推荐(0)

2021年9月3日

Datatables Renderers

摘要： Renderers There are occasions when working with tables that the data source for rows in the table do not contain the value that you wish to show direc 阅读全文

posted @ 2021-09-03 15:39 ChuckLu 阅读(111) 评论(0) 推荐(0)

DataTables Security Xss and Csrf

摘要： Security Security is a fundamental topic in web-development and is a topic that should not be overlooked by any developer, from interns to CTOs. High 阅读全文

posted @ 2021-09-03 15:37 ChuckLu 阅读(119) 评论(0) 推荐(0)

Does ASP.NET MVC razor view engine encode HTML by default?

摘要： Does ASP.NET MVC razor view engine encode HTML by default? Does ASP.NET MVC razor view engine encode HTML by default? Or do we have to use the htmlhel 阅读全文

posted @ 2021-09-03 14:21 ChuckLu 阅读(124) 评论(0) 推荐(0)

Chuck Lu

公告