Click here to Skip to main content
15,881,757 members
Home / Discussions / ASP.NET
   

ASP.NET

 
AnswerRe: Conversion of HTML to PDF Using JsPdf Pin
Member 1370125111-Jun-18 23:53
Member 1370125111-Jun-18 23:53 
QuestionImg Collection Pin
sunsher9-Jun-18 1:44
sunsher9-Jun-18 1:44 
AnswerRe: Img Collection Pin
Vincent Maverick Durano12-Jun-18 20:47
professionalVincent Maverick Durano12-Jun-18 20:47 
AnswerRe: Img Collection Pin
User 418025414-Jun-18 7:05
User 418025414-Jun-18 7:05 
QuestionHow do I control the specflow execution sequence Pin
Ger Hayden4-Jun-18 23:18
Ger Hayden4-Jun-18 23:18 
QuestionInsuring that an application does not maintain a valid state on initialization or shutdown failure. Pin
Stephen Holdorf4-Jun-18 8:45
Stephen Holdorf4-Jun-18 8:45 
AnswerRe: Insuring that an application does not maintain a valid state on initialization or shutdown failure. Pin
Stephen Holdorf5-Jun-18 0:52
Stephen Holdorf5-Jun-18 0:52 
AnswerRe: Insuring that an application does not maintain a valid state on initialization or shutdown failure. Pin
Nathan Minier5-Jun-18 1:43
professionalNathan Minier5-Jun-18 1:43 
Assuming Rule SRG-APP-000225 from the Application Security and Development Security Technical Implementation Guide (which is really an SRG, silly cybersec people), the current version dated 27APR2018 has a lot of example detail in it. https://iasecontent.disa.mil/stigs/zip/U_ASD_V4R6_STIG.zip

The general idea is that it should not be left "half-open" on failure, so something like a no-op sled cannot push an instruction into the application and bypass authentication. If you are running a basic CRUD app, then IIS will handle this stuff for you, providing you dispose of database connections which you're supposed to do anyway if you're using EF in the Repository/Unit of Work pattern.

By and large, in an MVC.NET application all you can really do is make sure that any operational statics are cleared (or reset as part of an application restart/correction process) and that un-managed resources are properly disposed as part of the failure. You can wrap all of this into a failure handler that can attempt to self-correct and, failing that, fail closed.

This all said, if an auditor declared it a finding then they should have given you some sort of finding detail.

If you need detailed support or code review, I'm in the GAL.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli

QuestionCreate a text file in client machine using asp.net Pin
raj.sibin3-Jun-18 19:02
raj.sibin3-Jun-18 19:02 
AnswerRe: Create a text file in client machine using asp.net Pin
Richard Deeming4-Jun-18 1:28
mveRichard Deeming4-Jun-18 1:28 
QuestionCode saved to a TFS workspace getting removed on next get latest workspace. Pin
Stephen Holdorf27-May-18 15:13
Stephen Holdorf27-May-18 15:13 
QuestionMiniblog and some of the technology he wrote question Pin
jkirkerx27-May-18 9:23
professionaljkirkerx27-May-18 9:23 
QuestionGrouping Items of this same Category Pin
Otekpo Emmanuel25-May-18 23:11
Otekpo Emmanuel25-May-18 23:11 
AnswerRe: Grouping Items of this same Category Pin
Richard MacCutchan26-May-18 2:43
mveRichard MacCutchan26-May-18 2:43 
GeneralRe: Grouping Items of this same Category Pin
Hariharan Baskaran26-May-18 3:50
Hariharan Baskaran26-May-18 3:50 
GeneralRe: Grouping Items of this same Category Pin
Richard MacCutchan26-May-18 4:39
mveRichard MacCutchan26-May-18 4:39 
QuestionASP MVC Solution projects and 3rd party dll's missing from TFS new branch download. Pin
Stephen Holdorf24-May-18 14:38
Stephen Holdorf24-May-18 14:38 
AnswerRe: ASP MVC Solution projects and 3rd party dll's missing from TFS new branch download. Pin
F-ES Sitecore25-May-18 3:58
professionalF-ES Sitecore25-May-18 3:58 
GeneralRe: ASP MVC Solution projects and 3rd party dll's missing from TFS new branch download. Pin
Stephen Holdorf25-May-18 13:57
Stephen Holdorf25-May-18 13:57 
GeneralRe: ASP MVC Solution projects and 3rd party dll's missing from TFS new branch download. Pin
F-ES Sitecore28-May-18 22:17
professionalF-ES Sitecore28-May-18 22:17 
QuestionBlog for MVC Pin
jkirkerx24-May-18 9:57
professionaljkirkerx24-May-18 9:57 
AnswerRe: Blog for MVC Pin
Richard Deeming25-May-18 2:38
mveRichard Deeming25-May-18 2:38 
GeneralRe: Blog for MVC Pin
jkirkerx25-May-18 8:46
professionaljkirkerx25-May-18 8:46 
QuestionWeb API: What is refresh token Pin
Mou_kol23-May-18 10:04
Mou_kol23-May-18 10:04 
AnswerRe: Web API: What is refresh token Pin
jkirkerx23-May-18 13:22
professionaljkirkerx23-May-18 13:22 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.