Explained – Canonicalization

Article
11/21/2007

ASP.NET 2.0 Security Videos

J.D. Meier, Keith Brown, Prashant Bansode
Microsoft Corporation

November 2007

This video module shows you how to avoid input and data validation security issues related to path validation.

Objectives

Use Access Control Lists (ACLs) and impersonation to control access to resources, instead of pathname comparisons
Use MapPath to restrict physical file paths to the current virtual directory.

Video

The video is a small wmv file streaming / download:

Explained – Canonicalization (Length: 8:43 - Size: 7:00 MB)

Recommended Guidance

Design Guidelines for Secure Web Applications (See "Input Validation" section)
Architecture and Design Review for Security (See "Input Validation" section)