DotNetKicks.com : Stories kicked by Haacked

Prevent Cross-Site Request Forgery (CSRF) using ASP.NET MVC's AntiForg

Tue, 09 Sep 2008 05:46:02 GMT

Steve Sanderson covers an attack that is not as well known as cross-site scripting (XSS) attacks called Cross-Site Request Forgery (CSRF) and some helpers in ASP.NET MVC CodePlex Preview 5 that can help mitigate the risk.

ASP.NET MVC Preview 5 and Form Posting Scenarios

Tue, 02 Sep 2008 14:01:03 GMT

Another epic post by The Gu

ASP.NET MVC preview 5's AntiForgeryToken helper method and attribute

Mon, 01 Sep 2008 15:31:02 GMT

The new ASP.NET MVC preview 5 featured a number of new HtmlHelper methods. One of these methods is the HtmlHelper.AntiForgeryToken.

Using the ASP.NET MVC ModelBinder attribute

Mon, 01 Sep 2008 21:31:02 GMT

ASP.NET MVC action methods can be developed using regular method parameters. In earlier versions of the ASP.NET MVC framework, these parameters were all simple types like integers, strings, booleans, . When required, a method parameter can be a complex type like a Contact with Name, Email and Message properties. This blog post shows you how to use the ModelBinder attribute which allows ASP.NET MVC action methods to accept complex types.

Building an ASP.NET MVC sitemap provider with security trimming

Fri, 29 Aug 2008 17:46:13 GMT

If you have been using the ASP.NET MVC framework, you possibly have been searching for something like the classic ASP.NET sitemap. After you've played with it, you even found it useful! But not really flexible and easy to map to routes and controllers. In this post, Maarten describes how to build a custom sitemap provider which uses ASP.NET MVC route data and AuthorizeAttribute to render MCS sitemap data with security trimming enabled!

Subtext 2 supports OpenID

Fri, 22 Aug 2008 08:46:02 GMT

Jon explains how OpenID works in Subtext 2 and how to configure it.

Subtext 2.0 "Poseidon" Released!

Wed, 13 Aug 2008 08:46:02 GMT

Subtext 2.0 is hot off the CI Server and the new bits are packed with a metric crap-load of bug fixes, new features, and patches.

Microsoft and Open Source...A New Love Story

Fri, 01 Aug 2008 00:31:02 GMT

Brian Prince outlines the latest happenings between Microsoft and the open source community. Including sponsoring the Apache Software Foundation.

Herding Code Podcast: Episode 9 with Rob Conery

Wed, 16 Jul 2008 21:31:13 GMT

The Herding Code crew (K. Scott Allen, Kevin Dente, Scott "LazyCoder" Koon, and Jon Galloway) catch up with Rob Conery on SubSonic 2.1, Where SubSonic fits in the Microsoft data access tools explosion, Why LINQ to SubSonic is so durn tricky, MVC Storefront - has it made Rob a TDD believer, and What else is Rob up to at Microsoft.

Negative Attitudes are a Cancer to Successful Teams

Tue, 08 Jul 2008 16:16:09 GMT

Team members with a negative attitude are thieves, robbing the team of its potential, its moral, and often its success.

ViewData "dot" Notation Expressions in ASP.NET MVC

Thu, 29 May 2008 16:16:13 GMT

ASP.NET MVC Preview 3 introduced a new concept that I'm calling "dot" notation expressions off of your ViewData. See how these expressions can be used and how powerful they are.

ASP.NET MVC - Extracting Web Resources

Thu, 15 May 2008 18:31:05 GMT

One nice feature that ASP.NET added in the 2.0 feature set was the ability to embed resources directly within an assembly and then later extract them through a separate Http Handler. You've notably saw this by all the WebResource.axd calls. If you're building a ASP.NET MVC view, you have two ways of extracting web resource urls. Find out how to do this in your view and through a new extension method.

Delegating Action Result

Mon, 12 May 2008 16:53:39 GMT

An MVC Action Result that uses a lambda to allow putting in any code in the result.

Writing A Custom File Download Action Result For ASP.NET MVC

Mon, 12 May 2008 17:01:02 GMT

In this post, I'll walk through building a custom action result for downloading files. As you'll see, they are extremely easy to build. Let's start at the end and see what the end-user behavior of this new result will be.

Hacking Visual Studio to Use More Than 2Gigabytes of Memory

Wed, 30 Apr 2008 05:01:02 GMT

Got more than 2GB of RAM in your machine? Get around the 2GB memory limit by making Visual Studio large address aware.

Anatomy of a Design Change

Mon, 28 Apr 2008 14:01:05 GMT

One example (among many) of how a seemingly small design change ends up requiring a lot of thought and work.

Monkey Patching CLR Objects

Mon, 28 Apr 2008 04:50:05 GMT

An example of DLR/CLR Interop to dynamically add new methods to a CLR object for use in IronRuby.

ASP.NET MVC - Legacy Url Routing

Fri, 25 Apr 2008 15:31:02 GMT

When converting web form applications to MVC, it requires a new Url structure. Learn how to handle legacy Url's within an MVC application by appropriately redirecting them to the correct MVC Url.

47 ASP.NET MVC Resources

Thu, 24 Apr 2008 23:01:02 GMT

Craig Shoemaker highlights some of the best ASP.NET MVC resources available.

Defining Routes and Views with IronRuby in ASP.NET MVC

Tue, 22 Apr 2008 22:53:57 GMT

Discussion of integrating IronRuby with ASP.NET MVC

The Developer Exchange Program

Tue, 22 Apr 2008 15:31:03 GMT

How much better a developer would you be if you could regularly observe another Agile team in action... in person.

ASP.NET MVC Source Refresh Preview

Thu, 17 Apr 2008 08:01:02 GMT

ScottGus Blogpost to the new MVC drop on Codeplex

ASP.NET MVC Interim Released (4/16/2008)

Thu, 17 Apr 2008 02:46:03 GMT

Get the latest MVC Source Code while it is hot.

ASP.Net MVC Framework 2 - A step by step guide

Wed, 16 Apr 2008 19:16:13 GMT

If you're just getting started with ASP.Net MVC you should read this article; it goes step by step and explains how to use MVC in a quite simplistic (yet clear) example.

This Is Why We Can't Have Nice Things, People

Wed, 09 Apr 2008 14:46:13 GMT

A brief discussion of the Rob Conery TDD backlash, and what it says about open-source on .NET, and the community at large.