- Loading...
Sponsored by Dometrain Courses—Get 30% off Dometrain Pro with code ANDREW30 and access the best courses for .NET Developers
My new book ASP.NET Core in Action, Third Edition is available now! It supports .NET 7.0, and is available as an eBook or paperback.
Automatic CSRF protection based on Fetch Metadata headers
Exploring the .NET 11 preview - Part 6
In this post I describe the new Cross-Site Request Forgery protection added to ASP.NET Core that uses Fetch Metadata HTTP headers instead of antiforgery tokens…
Understanding the Fetch Metadata HTTP headers: Sec-Fetch-Site and friends
In this post I describe the Fetch Metadata HTTP headers like Sec-Fetch-Site and Sec-Fetch-Mode which give information to a server about the context of a request…
Form binding in minimal APIs
Exploring the .NET 8 preview - Part 7
In this post I discuss the new form binding support for minimal APIs, the current limitations and rough edges, and how to work with antiforgery tokens…
Supporting legacy browsers and SameSite cookies without UserAgent sniffing in ASP.NET Core.
In this post I explore one way to get ASP.NET Core Identity SameSite cookies working with both legacy and modern browsers…
Understanding SameSite cookies
In this post I discuss SameSite cookies, what they are, why they're useful, and the limitations when you use them.…
Making authenticated cross-origin requests with ASP.NET Core Identity
In this post I describe how to make authenticated cross-origin requests from the browser to an app using ASP.NET Core Identity.…
