اشتراک‌ها
انتشار دات‌نت‌های 8.0.8 و 6.0.33 با دو مورد اصلاح مهم امنیتی
CVE-2024-38168.NET Denial of Service Vulnerability.NET 8.0
CVE-2024-38167.NET Information Disclosure Vulnerability.NET 8.0

.NET August updates

The following table includes release notes and binaries for the updates.

.NET 6.0.NET 8.0
Release Notes6.0.338.0.8
Installers and binaries6.0.338.0.8
Container Imagesimagesimages
Linux packages6.0.338.0.8
Known Issues6.08.0

انتشار دات‌نت‌های 8.0.8 و 6.0.33 با دو مورد اصلاح مهم امنیتی
اشتراک‌ها
NET 8.0.402. منتشر شد
.NET 8.0.402 - September 24, 2024

Today, we are releasing an update to .NET 8.0.400 SDK due to an issue with RestoreTask randomly fails after upgrading to latest version fixed by Allow @@ as a fallback.
The .NET 8.0.402 release is available for download. This SDK includes the previously released .NET 8.0.8 Runtime and is in support of Visual Studio 17.11 release. The latest 8.0 release is always listed at .NET 8.0 Releases.
NET 8.0.402. منتشر شد
اشتراک‌ها
روش‌های مقابله با مشکل امنیتی Mass Assignment در ASP.NET Core
  • Use BindAttribute on the action method 
  • Use [Editable] or [BindNever] on the model 
  • Use two different models 
  • Use a base class 
  • Use ModelMetadataTypeAttribute 
  • Explicit binding via TryUpdateModelAsync<> 

This was a very quick run down of some of the options available to you to prevent mass assignment. Which approach you take is up to you, though I would definitely suggest using one of the latter 2-model approaches. There are other options too, such as doing explicit binding via TryUpdateModelAsync<> but the options I've shown represent some of the most common approaches. Whatever you do, don't just blindly bind your view models if you have properties that should not be edited by a user, or you could be in for a nasty surprise.

And whatever you do, don't bind directly to your EntityFramework models. Pretty please. 

روش‌های مقابله با مشکل امنیتی Mass Assignment در ASP.NET Core
اشتراک‌ها
کتابخانه alloy-ui

AlloyUI is a framework built on top of YUI3 (JavaScript) that uses Bootstrap 3 (HTML/CSS) to provide a simple API for building high scalable applications  Demo

کتابخانه alloy-ui
اشتراک‌ها
اعتبارسنجی مدل‌ها در Web API

When a client sends data to your web API, often you want to validate the data before doing any processing. This article shows how to annotate your models, use the annotations for data validation, and handle validation errors in your web API. 

اعتبارسنجی مدل‌ها در Web API