Maarten Balliauw • 1/9/2019

Help, I've inherited an ASP.NET MVC Core code base with no Cross-Site Request Forgery (CSRF) measures!

This technical article addresses the challenge of securing an inherited ASP.NET MVC Core application with no Cross-Site Request Forgery (CSRF) protection. It explains CSRF risks, introduces the [ValidateAntiForgeryToken] attribute, and outlines a series on methods to locate vulnerable action methods, including using Structural Search and Replace and unit testing, while discussing explicit vs. global validation approaches.

0 comments

#security #Csrf #Aspnet Mvc