MVC 防止跨站POST提交

原創 陈熙之 2020-06-23 10:37

前幾天，一個站點的舉報信息裏，出現了一些莫名其妙的沒經過頁面驗證的數據，還高大上的全是英文，估計被跨站異步提交了。

自己做了一個測試，POST提交

首先在Controllers層post方法加入上加入 [ValidateAntiForgeryToken] 後

順便說下，這個只能用在post方法上使用。

在Views層的頁面上加入@Html.AntiForgeryToken()，在From表單中，如果是Jquery提交的，那麼需要在方法里加入一起提交，不然會報所需的防僞表單字段“__RequestVerificationToken”不存在。

 

 

再看看頁面

cookies

正常了。。。

 

發表評論
所有評論
還沒有人評論，想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章

對話阿里雲田濤濤：企業如何用好雲、管好雲？

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

郑思宇 2021-12-13 17:43:53

阿里雲發佈CloudOps白皮書，ECS自動化運維套件新升級

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

阿里云弹性计算 2021-12-10 14:58:57

Java 開發、全自研的開源監控組件來了，讓 openGauss 更香

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragr

万佳 2021-12-09 17:53:55

專訪 KubeVela 核心團隊：如何簡化複雜環境應用交付和管理

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Tina 2021-12-09 12:34:02

金融行業中，企業研發效能如何提升？

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

任传英 2021-11-15 15:23:51

中間件Knative達1.0里程碑

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Tina 2021-11-12 16:03:56

如何藉助Tekton實現微服務的Pipeline

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Alex Soto 2021-11-03 14:18:48

簡單、易用、易學，這個全自動測試平臺真香

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

万佳 2021-11-02 18:23:55

記錄我們遷移到Docker的挑戰和經驗教訓

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Djalal Elbe 2021-10-21 18:33:55

【得物技術】自動化生成代碼幾種方案的演變

{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":1}},{"type":"paragraph","attrs":{"indent":0,"nu

得物技术 2021-10-20 21:03:51

如何藉助Quarkus和MicroProfile實現微服務

{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"爲何需要微服務特性？

Alex Soto 2021-10-20 14:13:54

深入理解雲原生下自適應限流技術原理與應用

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragr

乔卓越 2021-10-19 12:28:56

亞馬遜可持續軟件工程實踐

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Tina 2021-10-19 10:13:57

如何在服務網格中避免複雜性問題

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Chris Campbell 2021-10-14 08:03:53

Kubernetes上分佈式系統的演化

{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"現代分佈式應用"}]

Bilgin Ibryam 2021-10-04 11:28:58