C# Класс Sholo.Web.Security.EnhancedSecurityModule

HttpModule implementation to enhance security of ASP.NET applications
Наследование: IHttpModule
Показать файл Открыть проект

Открытые методы

Метод Описание
Dispose ( ) : void

Performs cleanup when an instance of this HttpModule is being destroyed.

Init ( System.Web.HttpApplication context ) : void

Performs initializations / startup functionality when an instance of this HttpModule is being created.

Приватные методы

Метод Описание
OnBeginRequest ( object sender, EventArgs e ) : void

Intercepts the beginning of the request pipeline and performs analysis and manipulation of FormsAuthenticationCookies prior to the FormsAuthenticationModule's AuthenticateRequest firing. It stores some information about the request in the Context.Items collection for analysis later in the request pipeline execution.

OnEndRequest ( object sender, EventArgs e ) : void

Detects the creation of a FormsAuthenticationCookie and FormsAuthenticationTicket during the processing of the current request (i.e., PostBack of Login page/action), records the state of both in a UserAuthenticationTicket, and adds it to the Provider. In the event that this request was already authenticated, it detects and handles sliding expiration on the Provider.

OnError ( object sender, EventArgs e ) : void

Detects a CryptographicException and delays the response to reduce the likelihood of a successful padding oracle exploit attack.

RemovQueryStringArg ( string queryStringArg ) : string

Описание методов

Dispose() публичный Метод

Performs cleanup when an instance of this HttpModule is being destroyed.
public Dispose ( ) : void
Результат void

Init() публичный Метод

Performs initializations / startup functionality when an instance of this HttpModule is being created.
public Init ( System.Web.HttpApplication context ) : void
context System.Web.HttpApplication the current HttpApplication
Результат void