0

Explore Products

Best Sellers

New Releases

Books

Videos

Audiobooks

Free Learning

ASP.NET Core 5 Secure Coding Cookbook

You're reading from ASP.NET Core 5 Secure Coding Cookbook Practical recipes for tackling vulnerabilities in your ASP.NET web applications

Product type Paperback

Published in Jul 2021

Publisher Packt

ISBN-13 9781801071567

Length 324 pages

Edition 1st Edition

Languages

C#

Tools

.NET Core

Concepts

Web Programming

Author (1):

Roman Canlas

View More author details

Table of Contents (15) Chapters

Preface

1. Chapter 1: Secure Coding Fundamentals

2. Chapter 2: Injection Flaws FREE CHAPTER

3. Chapter 3: Broken Authentication

4. Chapter 4: Sensitive Data Exposure

5. Chapter 5: XML External Entities

6. Chapter 6: Broken Access Control

7. Chapter 7: Security Misconfiguration

8. Chapter 8: Cross-Site Scripting

9. Chapter 9: Insecure Deserialization

10. Chapter 10: Using Components with Known Vulnerabilities

11. Chapter 11: Insufficient Logging and Monitoring

12. Chapter 12: Miscellaneous Vulnerabilities

13. Chapter 13: Best Practices

14. Other Books You May Enjoy

Fixing information exposure through insecure cookies

Cookies are essential in maintaining state in ASP.NET Core web applications. Sensitive cookies, such as the ones that are used for authenticated sessions should only be transmitted over HTTPS and marked as HTTP-Only to stop attackers from stealing information stored in these cookies.

In this recipe, we are going to configure cookie policies that will prevent our ASP.NET Core sample web application from generating persistent cookies.

Getting ready

We will use the Online Banking app we used in the previous recipe. Using Visual Studio Code, open the sample Online Banking app folder at \Chapter07\information-exposure2\before\OnlineBankingApp\.

You can perform the steps in this folder to fix information exposure through the persistent cookies recipe.

How to do it…

Let's take a look at the steps for this recipe:

From the starting exercise folder, launch Visual Studio Code by typing the following command...

The rest of the chapter is locked

Register for a free Packt account to unlock a world of extra content!

A free Packt account unlocks extra newsletters, articles, discounted offers, and much more. Start advancing your knowledge today.

Unlock this book and the full library FREE for 7 days

Get unlimited access to 7000+ expert-authored eBooks and videos courses covering every tech area you can think of

Start free trial

Renews at €18.99/month. Cancel anytime

Authors (1)

Roman Canlas

Roman Canlas

Roman Canlas is a Senior Application Security Engineer working at a Fortune 500 company where he successfully established its global Application Security program from the ground up. His years of experience as a developer-led him to be an expert in Secure Code reviews and Static Application Security testing, focusing on web technologies. Roman held multiple certifications; the GIAC Web Application Penetration Tester (GWAPT), ISC2's Certified Secure Software Lifecycle Professional (CSSLP), and EC-Council's Certified Application Security Engineer in .NET (CASE.NET). Roman also has a Master's degree in Information Systems and a Bachelors in Computer Science.

See other products by Roman Canlas

Other recommended products

Related to this chapter

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Customizing ASP.NET Core 5.0

Customizing ASP.NET Core 5.0

Microsoft's ASP.NET Core is a powerful web framework full of hidden features that this book will help you to understand. You'll get hands-on with customizing ASP.NET Core to suit your application development needs with the help of practical examples and best practices.

Jan 2021 5h 20m

Bug Bounty Hunting Essentials

Bug Bounty Hunting Essentials

Bug Bounty hunting is a new method which companies use to test their applications. There is no dedicated methodology in place right now to help researchers upskill themselves and become bug bounty hunters, that is why there is ambiguity as to what the field is about, the book solves that problem. The book allows readers to train themselves as bug bounty hunters to excel in the field of application security.

Bug Bounty Hunting Essentials

Bug Bounty Hunting Essentials

Bug Bounty hunting is a new method which companies use to test their applications. There is no dedicated methodology in place right now to help researchers upskill themselves and become bug bounty hunters, that is why there is ambiguity as to what the field is about, the book solves that problem. The book allows readers to train themselves as bug bounty hunters to excel in the field of application security.

Bug Bounty Hunting Essentials

Bug Bounty Hunting Essentials

Bug Bounty hunting is a new method which companies use to test their applications. There is no dedicated methodology in place right now to help researchers upskill themselves and become bug bounty hunters, that is why there is ambiguity as to what the field is about, the book solves that problem. The book allows readers to train themselves as bug bounty hunters to excel in the field of application security.

Mastering Entity Framework Core 2.0

Mastering Entity Framework Core 2.0

Being able to create and maintain data-oriented applications has become crucial in modern programming. This is why Microsoft came up with Entity Framework so architects can optimize storage requirements while also writing efficient and maintainable application code. This book is a comprehensive guide that will show how to utilize the power of the Entity Framework to build efficient .NET Core applications. It not only teaches all the fundamentals of Entity Framework Core but also demonstrates how to use it practically so you can implement it in your software development.

Dec 2017 12h 52m

Personalised recommendations for you

Based on your interests and search pattern

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Modern Full-Stack React Projects

Modern Full-Stack React Projects

Full-Stack React Projects is a complete guide to learning full-stack web development, understanding the creation and integration of backend systems, and advancing your career as a frontend developer.

Jun 2024 16h 52m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m

Mastering Node.js Web Development

Mastering Node.js Web Development

Explore Node.js with practical examples that will teach you how to utilize open-source packages for real-world solutions. Gain the skills to develop and deploy server-side applications that enhance your client-side projects.

Jun 2024 25h 56m