site image
Andrew Lock avatar

Andrew Lock

Security
  1. Loading...
  2. Sponsored by Dometrain Courses—Get 30% off Dometrain Pro with code ANDREW30 and access the best courses for .NET Developers

    30% off with code ANDREW30 on Dometrain Pro
  3. ASP.NET Core in Action, Third Edition

    My new book ASP.NET Core in Action, Third Edition is available now! It supports .NET 7.0, and is available as an eBook or paperback.

  4. Banner image for Creating a software bill of materials (SBOM) for an open-source NuGet package

    Creating a software bill of materials (SBOM) for an open-source NuGet package

    In this post I discuss several tools you can use to create a software bill of materials (SBOM) for an application or a NuGet package…

     in  SecurityNuGetGitHubDevOps
  5. Banner image for Creating provenance attestations for NuGet packages in GitHub Actions

    Creating provenance attestations for NuGet packages in GitHub Actions

    In this post I discuss software provenance, what attestations say about your software, how they work, and how to create an attestation for a NuGet package…

     in  SecurityNuGetGitHubDevOps
  6. Banner image for Running an ASP.NET Core app inside IIS in a Windows container

    Running an ASP.NET Core app inside IIS in a Windows container

    In this post I describe how to run an ASP.NET Core app inside IIS in a Windows Docker container…

     in  ASP.NET CoreSecurityFront End
  7. Banner image for Preventing client-side cross-site-scripting vulnerabilities with Trusted Types

    Preventing client-side cross-site-scripting vulnerabilities with Trusted Types

    In this post I describe how the Trusted Types Content-Security-Policy feature can protect you against cross-site-scripting attacks.…

     in  ASP.NET CoreSecurityFront End
  8. Banner image for Cross-Origin-Embedder-Policy: securing embedded resources

    Cross-Origin-Embedder-Policy: securing embedded resources

    Understanding cross-origin security headers - Part 3

    In this post I discuss the Cross-Origin-Embedder-Policy, the requirements it places on your resources, and why it's required for some JavaScript APIs…

     in  SecurityASP.NET CoreCORS
  9. Banner image for Cross-Origin-Resource-Policy: preventing hotlinking and XSSI attacks

    Cross-Origin-Resource-Policy: preventing hotlinking and XSSI attacks

    Understanding cross-origin security headers - Part 2

    In this post I describe how to use the Cross-Origin-Resource-Policy to block cross-origin requests that would normally be allowed, such as in <img> tags…

     in  SecurityASP.NET CoreCORS
Andrew Lock | .Net Escapades
Want an email when
there's new posts?