Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
.gif)
ASP.NET 2.0 Security Videos
J.D. Meier, Keith Brown, Prashant Bansode
Microsoft Corporation
November 2007
This video module shows you how to avoid input and data validation security issues related to path validation.
Objectives
- Use Access Control Lists (ACLs) and impersonation to control access to resources, instead of pathname comparisons
- Use MapPath to restrict physical file paths to the current virtual directory.
Video
The video is a small wmv file streaming / download:
- Explained – Canonicalization (Length: 8:43 - Size: 7:00 MB)
Recommended Guidance
- Design Guidelines for Secure Web Applications (See "Input Validation" section)
- Architecture and Design Review for Security (See "Input Validation" section)