Browse by Tags

• Development Phase
• Test Phase
• WCF

WCF Security - Input/Data Validation Using Schemas

WCF offers very flexible approach of Input and Data Validation based on XML Schemas. The approach is flexible since the validation rules are expressed in form of XML schema and can be changed at any time without recompiling the solution. I followed the Read More...

Posted 25 May 08 03:52 by alikl | 1 Comments   
Filed under WCF, Input Validation, Security, Development Phase, Implementation

WCF Security - Input/Data Validation Sample Visual Studio Project

Input and Data Validation is one of the core security principles . WCF is no exception . To get most out of WCF in secure way one must implement proper Input and Data Validation. I was following instructions on How To – Perform Input Validation Read More...

Posted 25 May 08 12:17 by alikl | 1 Comments   
Filed under WCF, Input Validation, Security, Development Phase, Implementation

Creating a Parameterized Query In Visual Studio

Creating parameterized queries is one of the major countermeasures to SQL Injection attacks (not the ultimate but major). I always did it in old fashion way - using code only and I am ashamed I never utilize advanced productivity features of Visual Studio. Read More...

Posted 28 May 07 05:10 by alikl | 1 Comments   
Filed under Input Validation, Security, Implementation

XSS? - Do not Make Me Laugh, We Use WinForms

Reposted from XSS? - Do not Make Me Laugh, We Use WinForms I find myself sometimes (actually too many times...) in situation explaining people of impact of Cross Site Scripting (attack) attacks as a result of importer encoding of user input (vulnerability) Read More...

Posted 25 March 07 10:16 by alikl | 2 Comments   
Filed under Input Validation, Test Phase, Security, Development Phase, Implementation

Search

This Blog

• Home
• Email