Security with QueryString values in Asp.net MVC

前端 未结 7 1097
迷失自我
迷失自我 2020-12-10 08:30

How do you properly ensure that a user isnt tampering with querystring values or action url values? For example, you might have a Delete Comment action on your CommentContro

相关标签:
7条回答
  • 2020-12-10 09:08

    I've done funky things take the querystring, compress it, Base64 or just hex encode it, so that "commentid=4&userid=12345" becomes "code=1a2b23de12769"

    It's basically "Security through obscurity" but it does make a lot of work for someone trying to hack the site.

    0 讨论(0)
提交回复
热议问题