- Loading...
Sponsored by Dometrain Courses—Get 30% off Dometrain Pro with code ANDREW30 and access the best courses for .NET Developers

My new book ASP.NET Core in Action, Third Edition is available now! It supports .NET 7.0, and is available as an eBook or paperback.

Adding host filtering to Kestrel in ASP.NET Core
In this post I describe how to add host filtering to an ASP.NET Core application, and show why not filtering could allow attackers to exploit your app…

Preventing mass assignment or over posting with Razor Pages in ASP.NET Core
Mass assignment or over-posting is something to bear in mind when building ASP.NET Core apps. In this post I discuss how to stay safe when using Razor Pages.…

Adding simple email address obfuscation for your blog like Cloudflare Scrape Shield
In this post I show a simple way to obfuscate email addresses to make it harder for bots to scrape them from your site, similar to Cloudflare Scrape Shield.…

Safely migrating passwords in ASP.NET Core Identity with a custom PasswordHasher
In this post I create a custom IPasswordHasher<> implementation that can be used in ASP.NET Core Identity to migrate from weak hashes like MD5 or SHA1.…

Secure secrets storage for ASP.NET Core with AWS Secrets Manager (Part 2)
In this post I show how to control which secrets are loaded from AWS Secrets Manager when your ASP.NET Core app start.…

Secure secrets storage for ASP.NET Core with AWS Secrets Manager (Part 1)
In this post I show how you can store your ASP.NET Core secrets securely in AWS Secrets Manager and load them into the .NET Core configuration system.…

