XSS vulnerabilities generally occur when an application takes user input and outputs it to a page without validating, encoding or escaping it.
نویسنده مطلب با استناد به فراوانی پروژههای متن باز و تعداد مشارکت کنندگان تایید شده توسط انجمنهای مختلف این زبانها را به لحاظ امنیتی سطح بندی کرده است.
These coding languages have the most open source vulnerabilities, according to a WhiteSource report
[09:65] - Refactoring async operations with commands
[12:52] - Don't use .Wait()
[15:41] - Avoiding context switches with ConfigureAwait(false)
[19:45] - Sometimes you don't need to use async / await
[21:22] - Using async / await inside of try/catch and using statement blocks
For .NET and cloud developers, we’ve focused on improving the inner-loop dev experience. New .http/.rest files make it easier to test and iterate on your APIs directly in Visual Studio, while improved Dev Tunnels help streamline the configuration and management of your webhooks. We’ve also made it easier than ever to deploy your ASP.NET apps to containers.
Game developers can now view properties from base classes modified in an Unreal Blueprint asset without leaving the IDE. Visual Studio has improved the cross-platform development experience with a new remote file explorer, Linux Console output to the Integrated Terminal window, dev container improvements, and more.
Beyond individuals, Visual Studio also has new features to better support dev teams at scale, with exportable configuration files and a persistent update toggle helping ensure everyone on your team is working from the latest version of the tool.
This blog covers several of the top new features in Visual Studio 17.5—to see some in action, watch the Visual Studio 17.5 release video. As always lot of these features come straight from your feedback and suggestions. Your feedback is critical to help us make Visual Studio the best tool it can be!
TDLight Telegram Bot API is a fork of the official Telegram Bot API, focused on memory footprint and performance.
Latest #dotnetcore 3.0 runtime build just dropped the memory use of the #aspnetcore @TFBenchmarks benchmarks by half!
- Fixed conflicts of default footer's font and default document's font. - Added an optional parameter to DocumentPreferences.BackgroundImage method to specify the absolute position of the background's image. - Enabled running in medium trust environment. - Added PageTableAdded event. PageTableAdded Fires after each part of the MainTable has been added to the current page. - Added CustomSummaryPerPagePdfReport sample to show how to use PageTableAdded event.
A light weight plugin to simulate android like pattern lock interface for your hybrid app or website. Demo
NativeScript is a new framework for building native apps that allows developers to share code across iOS, Android, and Windows.
.NET 4.7.2 is for streaming data into memory between 2% (Unsafe Parse x86), 7% (Unsafe Parse x64) and 40% (Span Parse x64) slower than .NET Core. Especially the 40% speed drop for Span based Apis due to the lack of JIT support by the .NET Runtime is unfortunate.
