Articles : Page 1 of 1

  • Wishful Thinking: Why can't HTML fix Script Attacks at the Source?

    Wishful Thinking: Why can't HTML fix Script Attacks at the Source?

    Apr 12
    15

    The Web can be an evil place, especially if you're a Web Developer blissfully unaware of Cross Site Script Attacks (XSS). Even if you are aware of XSS in all of its insidious forms, it's extremely complex to deal with all the issues if you're taking user input and you're actually allowing users to post raw HTML into an application. I'm dealing with this again today in a Web application where legacy data contains raw HTML that has to be displayed and users ask for the ability to use raw HTML as...

  • IntelliSense for Razor Hosting in non-Web Applications

    IntelliSense for Razor Hosting in non-Web Applications

    Jan 11
    12

    When I posted my Razor Hosting article a couple of weeks ago I got a number of questions on how to get IntelliSense to work inside of Visual Studio while editing your templates. The answer to this question is mainly dependent on how Visual Studio recognizes assemblies, so a little background is required. If you open a template just on its own as a standalone file by clicking on it say in Explorer, Visual Studio will open up with the template in the editor, but you won’t get any IntelliSense...

  • Integrating ASP.NET MVC 3 into existing upgraded ASP.NET 4 Web Forms applications

    Integrating ASP.NET MVC 3 into existing upgraded ASP.NET 4 Web Forms applications

    Jan 11
    06

    I got an interesting question recently from a gentleman who has an existing ASP.NET WebForms 2.0 application that works just fine. He's upgraded it to ASP.NET 4 and it still works great, but now he wants to add some ASP.NET MVC pages to it. He doesn't want to rewrite the application. A few years ago I did a post on Hybrid ASP.NET applications. The goal was to reinforce the point that you can have ASP.NET applications that are both WebForms and MVC (as well as WCF and ASMX Web Services and o...

  • Hosting the Razor Engine for Templating in Non-Web Applications

    Hosting the Razor Engine for Templating in Non-Web Applications

    Dec 10
    28

    Microsoft’s new Razor HTML Rendering Engine that is currently shipping with ASP.NET MVC previews can be used outside of ASP.NET. Razor is an alternative view engine that can be used instead of the ASP.NET Page engine that currently works with ASP.NET WebForms and MVC. It provides a simpler and more readable markup syntax and is much more light weight in terms of functionality than the full blown WebForms Page engine, focusing only on features that are more along the lines of a pure view engine...

  • 1