MVC 防止跨站POST提交

原創 陈熙之 2020-06-23 10:37

前几天，一个站点的举报信息里，出现了一些莫名其妙的没经过页面验证的数据，还高大上的全是英文，估计被跨站异步提交了。

自己做了一个测试，POST提交

首先在Controllers层post方法加入上加入 [ValidateAntiForgeryToken] 后

顺便说下，这个只能用在post方法上使用。

在Views层的页面上加入@Html.AntiForgeryToken()，在From表单中，如果是Jquery提交的，那么需要在方法里加入一起提交，不然会报所需的防伪表单字段“__RequestVerificationToken”不存在。

 

 

再看看页面

cookies

正常了。。。

 

發表評論
所有評論
還沒有人評論，想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章

对话阿里云田涛涛：企业如何用好云、管好云？

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

郑思宇 2021-12-13 17:43:53

阿里云发布CloudOps白皮书，ECS自动化运维套件新升级

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

阿里云弹性计算 2021-12-10 14:58:57

Java 开发、全自研的开源监控组件来了，让 openGauss 更香

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragr

万佳 2021-12-09 17:53:55

专访 KubeVela 核心团队：如何简化复杂环境应用交付和管理

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Tina 2021-12-09 12:34:02

金融行业中，企业研发效能如何提升？

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

任传英 2021-11-15 15:23:51

中间件Knative达1.0里程碑

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Tina 2021-11-12 16:03:56

如何借助Tekton实现微服务的Pipeline

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Alex Soto 2021-11-03 14:18:48

简单、易用、易学，这个全自动测试平台真香

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

万佳 2021-11-02 18:23:55

记录我们迁移到Docker的挑战和经验教训

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Djalal Elbe 2021-10-21 18:33:55

【得物技术】自动化生成代码几种方案的演变

{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":1}},{"type":"paragraph","attrs":{"indent":0,"nu

得物技术 2021-10-20 21:03:51

如何借助Quarkus和MicroProfile实现微服务

{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"爲何需要微服務特性？

Alex Soto 2021-10-20 14:13:54

深入理解云原生下自适应限流技术原理与应用

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null}},{"type":"paragr

乔卓越 2021-10-19 12:28:56

亚马逊可持续软件工程实践

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Tina 2021-10-19 10:13:57

如何在服务网格中避免复杂性问题

{"type":"doc","content":[{"type":"paragraph","attrs":{"indent":0,"number":0,"align":null,"origin":null},"content":[{"typ

Chris Campbell 2021-10-14 08:03:53

Kubernetes上分布式系统的演化

{"type":"doc","content":[{"type":"heading","attrs":{"align":null,"level":2},"content":[{"type":"text","text":"現代分佈式應用"}]

Bilgin Ibryam 2021-10-04 11:28:58