C# Class Sholo.Web.Security.EnhancedSecurityModule

HttpModule implementation to enhance security of ASP.NET applications

Inheritance: IHttpModule

Public Methods

Method	Description
Dispose ( ) : void	Performs cleanup when an instance of this HttpModule is being destroyed.
Init ( System.Web.HttpApplication context ) : void	Performs initializations / startup functionality when an instance of this HttpModule is being created.

Method	Description
OnBeginRequest ( object sender, EventArgs e ) : void	Intercepts the beginning of the request pipeline and performs analysis and manipulation of FormsAuthenticationCookies prior to the FormsAuthenticationModule's AuthenticateRequest firing. It stores some information about the request in the Context.Items collection for analysis later in the request pipeline execution.
OnEndRequest ( object sender, EventArgs e ) : void	Detects the creation of a FormsAuthenticationCookie and FormsAuthenticationTicket during the processing of the current request (i.e., PostBack of Login page/action), records the state of both in a UserAuthenticationTicket, and adds it to the Provider. In the event that this request was already authenticated, it detects and handles sliding expiration on the Provider.
OnError ( object sender, EventArgs e ) : void	Detects a CryptographicException and delays the response to reduce the likelihood of a successful padding oracle exploit attack.
RemovQueryStringArg ( string queryStringArg ) : string

Performs cleanup when an instance of this HttpModule is being destroyed.

public Dispose ( ) : void
return	void

Performs initializations / startup functionality when an instance of this HttpModule is being created.

public Init ( System.Web.HttpApplication context ) : void
context	System.Web.HttpApplication	the current HttpApplication
return	void