Skip to main content

Home/ Agency Oasis Developers/ Group items tagged or

Rss Feed Group items tagged

mgraber

Cross-Site Request Forgery (CSRF) Prevention Cheat Sheet - OWASP - 0 views

  •  
    "Viewstate (ASP.NET) ASP.NET has an option to maintain your ViewState. The ViewState indicates the status of a page when submitted to the server. The status is defined through a hidden field placed on each page with a control. Viewstate can be used as a CSRF defense, as it is difficult for an attacker to forge a valid Viewstate. It is not impossible to forge a valid Viewstate since it is feasible that parameter values could be obtained or guessed by the attacker. However, if the current session ID is added to the ViewState, it then makes each Viewstate unique, and thus immune to CSRF. To use the ViewStateUserKey property within the Viewstate to protect against spoofed post backs. Add the following in the OnInit virtual method of the Page-derived class (This property must be set in the Page.Init event) protected override OnInit(EventArgs e) { base.OnInit(e); if (User.Identity.IsAuthenticated) ViewStateUserKey = Session.SessionID; } The following keys the Viewstate to an individual using a unique value of your choice. (Page.ViewStateUserKey) This must be applied in Page_Init because the key has to be provided to ASP.NET before Viewstate is loaded. This option has been available since ASP.NET 1.1. However, there are limitations on this mechanism. Such as, ViewState MACs are only checked on POSTback, so any other application requests not using postbacks will happily allow CSRF. "
Mark Ursino

OpenCalais Integration Module - 0 views

  •  
    OpenCalais Integration module allows you to to automatically discover semantic relations between your content, Create relevant tags in the Sitecore Taxonomy and tag your content with those by integrating the Sitecore Taxonomy Module, WeBlog Module or any Sitecore item based taxonomy seamlessly with OpenCalais service without additional development. The service is open for commercial and non-commercial use and is free if you don't need to tag more than 50,000 documents a day. The service is easy to apply in your project with this module and almost effortless if you're already using the Sitecore's Shared Source Taxonomy Module.
Sam Griffin

Code Coloring - 0 views

  •  
    I know a bunch of people have custom themes and coloring for their visual studio settings. If you need the default code coloring for documentation or anything of that sort, then you can copy your coding here and it will set the default coloring for you.
mgraber

CSS3 Specificity - 1 views

  •  
    This page was created to calculate the CSS specificity of a stylesheet (not including the inline or style rules; the "a" part of the equation). Before this little project, I didn't have a clear understanding of the specificity rules. Now, after creating this page, I don't think I'll need this application.
mgraber

Specificity " Learn CSS3 | Cheat Sheet | CSS Tutorial | Selectors | Properties - 0 views

  •  
    Specificity is a mechanism within the CSS cascade that aids conflict resolution. The concept of specificity states that when two or more declarations that apply to the same element, and set the same property, have the same importance and origin, the declaration with the most specific selector will take precedence.
mgraber

Specificity Calculator - 0 views

shared by mgraber on 23 Jan 13 - No Cached
  •  
    Specificity Calculator isn't a CSS validator. If you enter invalid selectors it will return incorrect results. For example, the negation pseudo-class may only take a simple selector as an argument. Using a psuedo-element or combinator as an argument for :not() is invalid CSS3 so Specificity Calculator will return incorrect results.
Sam Griffin

Unpack minified code - 1 views

shared by Sam Griffin on 16 Feb 12 - Cached
  •  
    Beautify, unpack or deobfuscate JavaScript and HTML, make JSON/JSONP readable, etc.
Mark Ursino

Different installation methods for the Worry-Free Business Security (WFBS) Security Age... - 0 views

  •  
    TrendMicro installation options
Max Guyton

Could not load type System.ServiceModel.Activation.HttpModule | Developer OneNote - 0 views

  •  
    Loaded our internal dev site and received the titled error. Apparently this happens sometimes when running DotNet 3.0 or 3.5 WCF features on a DotNet 4.0 framework.
Douglas Couto

Cant use pipe symbol for regular expression : The Official Microsoft IIS Site - 0 views

  •  
    "Try putting the absoutePath in quotes"
tom smith

Slides, A Slideshow Plugin for jQuery - 1 views

  •  
    Slides is a crazy simple slideshow plugin for jQuery. It's easy to implement, customize and style. What could be better? With features like looping, auto play, fade or slide transition effects, crossfading, image preloading, auto generated pagination, the list goes on.
Douglas Couto

JAVASCRIPT - How to force a page refresh or reload in jQuery? - efreedom - 1 views

  •  
    "You don't need jQuery to do this. Embrace the power of JavaScript. window.location.reload()"
mgraber

SourceForge.net: PortableApps.com: Portable Software/USB: Files - 0 views

  • Mozilla Firefox, Portable Edition 2.0.0.20 Notes
    • mgraber
       
      Hey M3
    • mgraber
       
      download or else
anonymous

Firefinder - Robert's talk - 0 views

  •  
    Firefinder is an extension to Firebug (in Firefox) and offers the functionality to, in a quick way, find HTML elements matching chosen CSS selector(s) or XPath
« First ‹ Previous 81 - 100 of 103 Next ›
Showing 20 items per page