C# Class Sholo.Web.Security.EnhancedSecurityModule

HttpModule implementation to enhance security of ASP.NET applications
Inheritance: IHttpModule
Afficher le fichier Open project: scottt732/SholoWebSecurity

Méthodes publiques

Méthode Description
Dispose ( ) : void

Performs cleanup when an instance of this HttpModule is being destroyed.

Init ( System.Web.HttpApplication context ) : void

Performs initializations / startup functionality when an instance of this HttpModule is being created.

Private Methods

Méthode Description
OnBeginRequest ( object sender, EventArgs e ) : void

Intercepts the beginning of the request pipeline and performs analysis and manipulation of FormsAuthenticationCookies prior to the FormsAuthenticationModule's AuthenticateRequest firing. It stores some information about the request in the Context.Items collection for analysis later in the request pipeline execution.

OnEndRequest ( object sender, EventArgs e ) : void

Detects the creation of a FormsAuthenticationCookie and FormsAuthenticationTicket during the processing of the current request (i.e., PostBack of Login page/action), records the state of both in a UserAuthenticationTicket, and adds it to the Provider. In the event that this request was already authenticated, it detects and handles sliding expiration on the Provider.

OnError ( object sender, EventArgs e ) : void

Detects a CryptographicException and delays the response to reduce the likelihood of a successful padding oracle exploit attack.

RemovQueryStringArg ( string queryStringArg ) : string

Method Details

Dispose() public méthode

Performs cleanup when an instance of this HttpModule is being destroyed.
public Dispose ( ) : void
Résultat void

Init() public méthode

Performs initializations / startup functionality when an instance of this HttpModule is being created.
public Init ( System.Web.HttpApplication context ) : void
context System.Web.HttpApplication the current HttpApplication
Résultat void