New answers tagged .net
This is sort of the source for preventing XSS in ASP.NET (at least from Microsoft): How To: Prevent Cross-Site Scripting in ASP.NET Some important things to glean from the article specific to your question: Use the HttpUtility.HtmlEncode method to encode output if it contains input from the user or from other sources such as databases. use ...
I can infer from your question that you are using a SPNEGO LDAP Web Server Delegation Authentication scenario. This means you shouldn't be allowing anonymous authentication in IIS, since you're delegating into IIS to authenticate the user you have no choice on your app but to accept whatever answer IIS gives you. If you have anonymous authentication it ...
Well no, that won't work for you. The point of a client cert isn't really the cert part, but the private key tied to the client cert. If you don't have the private key you can't do anything useful. What would happen is that the request you send is encrypted with the servers public key and decrypted with their private key. Conversely, any response the server ...
I think you are speaking of the implicit grant which return directly an access token to the client. You have better time to directly look at the RFC. Is it safe if you use https. If you use JWT (json web token), the access_token can be signed (JSON Web Signature (JWS)) and encrypted (JSON Web Encryption (JWE)) in the payload
Top 50 recent answers are included