Administrator wants to make a security check that no one has tampered with the “ViewState”, how can he ensure this?
Microsoft
has provided the administrator with two mechanisms for increasing the security of ViewState,
which are as follows:
- Machine Authentication Check (MAC)
This is done at the page level where in the page directive we need to add the following:
- Encrypting the ViewState
This is done at the machine level in the machine.config file. In the tag <machineKey" the property "validation" needs to be set to "3DES".
Comments
Post a Comment