Chapter 4: Sensitive Data Exposure

Data protection in transit and at rest is paramount. Ensuring the use of strong transport protocols and web security directives can stop data from being compromised in transit and prevent unintended sensitive data exposure. Utilizing the latest Transport Layer Security (TLS) protocol version in code can help mitigate these vulnerabilities, which are brought about by the implementation flaws in lower versions of TLS, making man-in-the-middle attacks such as POODLE, LogJam, and FREAK difficult to succeed.

This chapter will help you determine if security requirements that adequately protect data in transit and at rest exist in your code. You will also learn about what additional web security mechanisms you can implement in your ASP.NET Core web application to protect you from unwanted data leakage.

In this chapter, we're going to cover the following recipes:

• Fixing insufficient protection of data in transit
• Fixing missing HTTP...