0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

ASP.NET Core 5 Secure Coding Cookbook

You're reading from ASP.NET Core 5 Secure Coding Cookbook Practical recipes for tackling vulnerabilities in your ASP.NET web applications

Product type Paperback

Published in Jul 2021

Publisher Packt

ISBN-13 9781801071567

Length 324 pages

Edition 1st Edition

Languages

C#

Tools

.NET Core

Concepts

Web Programming

Author (1):

Roman Canlas

View More author details

Table of Contents (15) Chapters

Preface

1. Chapter 1: Secure Coding Fundamentals

2. Chapter 2: Injection Flaws FREE CHAPTER

3. Chapter 3: Broken Authentication

4. Chapter 4: Sensitive Data Exposure

5. Chapter 5: XML External Entities

6. Chapter 6: Broken Access Control

7. Chapter 7: Security Misconfiguration

8. Chapter 8: Cross-Site Scripting

9. Chapter 9: Insecure Deserialization

10. Chapter 10: Using Components with Known Vulnerabilities

11. Chapter 11: Insufficient Logging and Monitoring

12. Chapter 12: Miscellaneous Vulnerabilities

13. Chapter 13: Best Practices

14. Other Books You May Enjoy

Fixing XXE injection with LINQ to XML

Language-Integrated Query or LINQ is an API within the .NET framework that provides query-like syntax for writing declarative code. LINQ comes in different flavors, and LINQ to XML is one of them. LINQ to XML is an in-memory XML parser that allows you to perform XML transformations – from modifying elements and nodes to serialization.

In general, LINQ to XML is safe from XXE injection. The XDocument class has DTD processing disabled by default. However, this can be unsafe when it's instantiated with an insecure XML parser such as XmlReader. This recipe will show you how to find a security flaw in your LINQ to XML code and fix the bug by disabling DTD processing.

Getting ready

Using Visual Studio Code, open the sample Online Banking app folder at \Chapter05\xxe-injection03\before\OnlineBankingApp\.

You can perform the steps for fixing XXE injections with LINQ to XML in this folder.

How to do it…

Let's take...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (1)

Roman Canlas

Roman Canlas

Roman Canlas is a Senior Application Security Engineer working at a Fortune 500 company where he successfully established its global Application Security program from the ground up. His years of experience as a developer-led him to be an expert in Secure Code reviews and Static Application Security testing, focusing on web technologies. Roman held multiple certifications; the GIAC Web Application Penetration Tester (GWAPT), ISC2's Certified Secure Software Lifecycle Professional (CSSLP), and EC-Council's Certified Application Security Engineer in .NET (CASE.NET). Roman also has a Master's degree in Information Systems and a Bachelors in Computer Science.

See other products by Roman Canlas

Other recommended products

Related to this chapter

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Bug Bounty Hunting Essentials

Bug Bounty Hunting Essentials

Bug Bounty hunting is a new method which companies use to test their applications. There is no dedicated methodology in place right now to help researchers upskill themselves and become bug bounty hunters, that is why there is ambiguity as to what the field is about, the book solves that problem. The book allows readers to train themselves as bug bounty hunters to excel in the field of application security.

Bug Bounty Hunting Essentials

Bug Bounty Hunting Essentials

Bug Bounty hunting is a new method which companies use to test their applications. There is no dedicated methodology in place right now to help researchers upskill themselves and become bug bounty hunters, that is why there is ambiguity as to what the field is about, the book solves that problem. The book allows readers to train themselves as bug bounty hunters to excel in the field of application security.

Bug Bounty Hunting Essentials

Bug Bounty Hunting Essentials

Bug Bounty hunting is a new method which companies use to test their applications. There is no dedicated methodology in place right now to help researchers upskill themselves and become bug bounty hunters, that is why there is ambiguity as to what the field is about, the book solves that problem. The book allows readers to train themselves as bug bounty hunters to excel in the field of application security.

Mastering Entity Framework Core 2.0

Mastering Entity Framework Core 2.0

Being able to create and maintain data-oriented applications has become crucial in modern programming. This is why Microsoft came up with Entity Framework so architects can optimize storage requirements while also writing efficient and maintainable application code. This book is a comprehensive guide that will show how to utilize the power of the Entity Framework to build efficient .NET Core applications. It not only teaches all the fundamentals of Entity Framework Core but also demonstrates how to use it practically so you can implement it in your software development.

Dec 2017 12h 52m

Personalised recommendations for you

Based on your interests and search pattern

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m