Articles : Page 1 of 1

  • Wishful Thinking: Why can't HTML fix Script Attacks at the Source?

    Wishful Thinking: Why can't HTML fix Script Attacks at the Source?

    Apr 12
    15

    The Web can be an evil place, especially if you're a Web Developer blissfully unaware of Cross Site Script Attacks (XSS). Even if you are aware of XSS in all of its insidious forms, it's extremely complex to deal with all the issues if you're taking user input and you're actually allowing users to post raw HTML into an application. I'm dealing with this again today in a Web application where legacy data contains raw HTML that has to be displayed and users ask for the ability to use raw HTML as...

  • ASP.NET MVC 4 Beta

    ASP.NET MVC 4 Beta

    Feb 12
    20

    A few days ago we released the ASP.NET MVC 4 Beta. This is a significant release that brings with it a bunch of great new features and capabilities. The ASP.NET MVC 4 Beta release works with VS 2010 and .NET 4.0, and is side-by-side compatible with prior releases of ASP.NET MVC (meaning you can safely install it and not worry about it impacting your existing apps built with earlier releases). It supports a “go-live” license that allows you to build and deploy production apps with it. Click ...

  • Adding Export Capabilities to the Razor WebGrid

    Adding Export Capabilities to the Razor WebGrid

    Sep 11
    03

    When MVC first came out I really missed having a grid control. Now a few years later, we finally have a grid control again. In case, you didnt know the WebGrid was included in the System.Web.Helpers assembly which shipped with MVC 3. After using a variety of grid controls over the years I was actually glad that the API for the new WebGrid was kept clean and simple. Here is a screenshot of what the grid looks like: To display a grid on a razor view page, you basically create a new grid objec...

  • New Ajax Grid Scaffolding NuGet Package for MVC 3

    New Ajax Grid Scaffolding NuGet Package for MVC 3

    Aug 11
    18

    EDITOR’S NOTE: Microsoft has an amazing intern program. For a summer, these bright college students work with a feature crew getting real work done, all the while attending cool events nearly every week that, frankly, make the rest of us jealous! Just look at some of the perks listed in this news article! This summer, the ASP.NET MVC is hosting an intern, Stephen Halter, who while very smart, doesn’t have a blog of his own (booo! hiss!). Being the nice guy that I am (and also being amenable ...

  • Text templating using Razor the easy way

    Text templating using Razor the easy way

    Aug 11
    02

    As a web guy, I’ve slung more than my fair share of angle brackets over the tubes of the Internet. The Razor syntax quickly became my favorite way of generating those angle brackets soon after its release. But its usefulness is not limited to just the web. The ASP.NET team designed Razor to generate HTML markup without being tightly coupled to ASP.NET. This opens up the possibility to use Razor in many other contexts other than just a web application. For example, the help documentation fo...

  • ASP.NET MVC 3 and the @helper syntax within Razor

    ASP.NET MVC 3 and the @helper syntax within Razor

    May 11
    13

    ASP.NET MVC 3 supports a new view-engine option called “Razor” (in addition to continuing to support/enhance the existing .aspx view engine). Razor minimizes the number of characters and keystrokes required when writing a view template, and enables a fast, fluid coding workflow. Unlike most template syntaxes, with Razor you do not need to interrupt your coding to explicitly denote the start and end of server blocks within your HTML. The Razor parser is smart enough to infer this from your co...

  • Hosting Razor outside of ASP.Net (Revised for MVC3 RC!)

    Hosting Razor outside of ASP.Net (Revised for MVC3 RC!)

    Nov 10
    16

    We recently released the latest preview release of MVC 3, including an updated version of Razor.  One of the things we did in this release is simplify the hosting APIs dramatically.  I did a demo of these new APIs in a pre-recorded PDC10 talk I did with Scott Hunter, which is available to stream here: http://bit.ly/ac7B0P.  As I promised in that talk (and a few others before and after it ), I'm finally blogging about the sample I showed in that talk! The hosting APIs center around two classe...

  • Hosting Razor outside of ASP.Net (Revised for MVC3 RC!)

    Hosting Razor outside of ASP.Net (Revised for MVC3 RC!)

    Nov 10
    16

    We recently released the latest preview release of MVC 3, including an updated version of Razor.  One of the things we did in this release is simplify the hosting APIs dramatically.  I did a demo of these new APIs in a pre-recorded PDC10 talk I did with Scott Hunter, which is available to stream here: http://bit.ly/ac7B0P.  As I promised in that talk (and a few others before and after it ), I'm finally blogging about the sample I showed in that talk! The hosting APIs center around two classe...

  • 1