Disclaimer

Any opinions expressed here are my own and not necessarily those of my employer (I'm self-employed).

Sep 28, 2010

ASP.NET security patch, what's changed

I've snooped around with fiddler to see what changes have been introduced by the patch release today for the ASP.NET framework.

I've seen to notable differences in the behaviour of webresource.axd:

  1. The d parameter is now set to a value much longer than before, it seems it's 50 bytes longer
  2. Tampering with this parameter will not trigger a 500 server error and an entry in the application event log. A regular 404 error is returned to the browser, and nothing is logged in the event log.
My guess is that they have included an integrity check of some kind. Also, they've fixed the problem with error messages distinguishing between the different errors occuring. Now, it's all 404 errors.

Anyhow, it's time to go home from work. Unfortunately, my local time is quite far from PDT. Happy patching!

32 comments:

  1. Replies
    1. یکی از بهترین سایت های موزیک برای دانلود آهنگ سایته: دانلود آهنگ جدید
      می باشد که دارای ارشیو کامل از

      Delete
  2. I like changes if we are talking in general. But I write my academic papers using advices from https://samedaypaper.org/blog/paper-outline and I don't want to change it.

    ReplyDelete


  3. نقل عفش من جدة الى الطائف
    شركة نقل عفش من المدينة المنورة الى جدة شركة نقل عفش من جدة الى المدينة المنورة

    شركة نقل عفش من الرياض الى الامارات شركات نقل عفش من الرياض الى الامارات
    شركة نقل عفش من الرياض الى الاردن شركات نقل عفش من الرياض الى الاردن

    ________

    ReplyDelete
  4. Thanks for this valuable information sharing, and i learned a lot and cleared my all doubts in this.. keep posting like this useful information.
    post free classified ads in india

    ReplyDelete
  5. Thanks for this valuable information sharing, and i learned a lot and cleared my all doubts in this.. keep posting like this useful information.
    Scaffolding Dealers in Chennai
    Aluminium Scaffolding Dealers in Chennai

    ReplyDelete
  6. Thanks for sharing this wonderful information. I hope you will share more helpful information regarding the content.
    web portal development company in chennai

    ReplyDelete
  7. Thanks for sharing this wonderful information. I hope you will share more helpful information regarding the content.
    scaffolding dealers in chennai
    aluminium scaffolding dealers in chennai

    ReplyDelete
  8. Law Assignment Writing Services are hard to come across for those in need of Law Research Writing Services and law essay writing services.

    ReplyDelete
  9. Online biology essay services have come up with Biology Essay Writing Services for biology research paper writing service students in order for them to score straight A’s in their custom biology research paper services.

    ReplyDelete
  10. To seek the best Life Science Writing Services for those studying biology coursework writing services, it is important to hire an award winning science paper writing service company.

    ReplyDelete
  11. See what someone likes, comments and follows on Insta with Snoopreport ... No need to download Insta stalker app, Snoopreport Instagram tracker will show photos and videos in the world.

    ReplyDelete
  12. This information is impressive..I am inspired with your post writing style & how continuously you describe this topic.

    apache spark training in bangalore
    Spark Training institute in Bangalore

    ReplyDelete
  13. There are lots of experts which are expert in asp.net coding language which is very sharp language to learn.
    Assignment review

    ReplyDelete
  14. Such kind of security is very helpful for our online business because through this, we can run our online business without any fear. I hope, many businessmen will get benefits through this security system. Dissertation writing services.

    ReplyDelete
  15. My programmer is trying to convince me to move to .net from 토토사이트. I have always disliked the idea because of the expenses. But he's tryiong none the less.

    ReplyDelete
  16. Great web site. A lot of useful information here. I’m sending it to several friends ans also sharing in delicious. And obviously, thanks in your effort! 야설
    Feel free to visit my blog :
    야설

    ReplyDelete
  17. Very good information. Lucky me I recently found your website by accident I have book marked it for later!
    일본야동
    Feel free to visit my blog : 일본야동

    ReplyDelete
  18. This blog is very informative the stuff you provide I really enjoyed reading 국산야동
    Feel free to visit my blog : 국산야동

    ReplyDelete
  19. I would like to thank you for the efforts you have made in writing this article. I am hoping the same best work from you in the future as well. 일본야동
    Feel free to visit my blog : e 일본야동

    ReplyDelete
  20. Really I like your blogs it is easy to reading. You are a good blogger pls keep it up. Thank you so much. Best Dissertation Writing Services in the UK.

    ReplyDelete

Copyright notice

© André N. Klingsheim and www.dotnetnoob.com, 2009-2018. Unauthorized use and/or duplication of this material without express and written permission from this blog’s author and/or owner is strictly prohibited. Excerpts and links may be used, provided that full and clear credit is given to André N. Klingsheim and www.dotnetnoob.com with appropriate and specific direction to the original content.

Read other popular posts