|
|
|
Security Briefs
-
You may have noticed some changes on our website. We made a number of updates last Friday, which I’ll summarize in this post. We’ve been advertising the new Ultimate subscription , which gives you three vouchers for virtual classroom training...
-
It was great meeting all of you at the camp! Thanks for coming to my talk, “Get a Whiff of WIF”. The slides and demos can be found here . If you attended the camp, don’t forget to activate your free 7-day subscription to Pluralsight On-Demand! You’ll...
-
I was fortunate to be able to tag team a talk at TechEd New Orleans with Aaron Skonnard this week, and I wanted to post my bits from the demos we did. There were three parts to my demo. The first part was where Aaron added in an attribute on his Presentation...
-
I’m building a view engine for ASP.NET MVC 2 that locates views based on the type names of the controllers. To unit test the bits that construct a path from a namespace, I needed to have a bunch of different types of controllers, and using actual...
-
Ever since I started working out the RESTful routing strategy we’ll be using for our MVC apps at Pluralsight, I’ve been trying to avoid identifying controllers with strings in places like HtmlHelpers.ActionLink. It occurred to me early on...
-
In my last post , I talked about how convenient it is to use MVC 2 templates to display data. I’ve been trying to use similar ideas to construct generic forms, but I’m running into a problem that I’m hoping there’s an easy way...
-
We started building our website back in 2004, when ASP.NET WebForms were all the rage. I’ve finally bitten the bullet and started integrating MVC into our website so that going forward, we’ll have a cleaner architecture that allows for better...
-
There’s lots of info out there on using Microsoft.Web.Administration to configure IIS programmatically. I personally found most of it rather confusing, and I spent way too much time trying to figure this out, calling GetApplicationHostConfiguration...
-
Even as Web Single Sign On is gaining more and more traction, there’s still churn. I would much prefer to isolate my application developers from the details of whatever library I happen to be using today to get details about my user. ASP.NET developers...
-
Get them here . Thanks to all who joined me - I had a great time in London! Be certain to redeem your Pluralsight On-Demand trial subscriptions, guys!
-
For those who were in my talk today, I mentioned that the SQL injection and XSS demos are actually labs that you can find on the Internet. Here's links to them. I built these for Patterns & Practices a few years ago. http://channel9.msdn.com/Wiki...
-
Thanks to Julie and David for inviting me to speak this past weekend in Denver. I hope I opened some eyes to the direction the industry is headed with identity and single sign on! You can find my slides here . For those who attended, don't forget...
-
It told me to do that. And silly me , I took the advice. Maybe it wasn’t silly advice at all. But when, like me, you’ve been used to programming ASP.NET for years (which does NOT follow this advice) and you flip over to use the Uri class to represent...
-
I admit it. System.Uri (from the .NET Framework) has had me fooled for a long time. Normally when I need to extract the string value of a Uri instance, I use the AbsoluteUri method to do that. But that doesn’t work when the Uri instance models a relative...
-
I love the pictures that Vittorio uses in this post . While I’ve always thought of issuers as “caring” for their users (in the case where the issuer is acting as an identity provider) or “caring” for their apps (in the case where the issuer is designed...
|
|
|
|
|