We will be undergoing scheduled maintenance on May 20th, 2013 at 02:00 GMT.
Designing and Developing ASP.NET 4 Web Apps (Exam 70-519) Tutorials
Extensible Request Validation / HTML Encoding
Visitors to VTC.com will be able to view all introductory videos for each training course.
Free Trial Members will gain access to first three chapters for each training course.
Full Access Members have full access to VTC.com�s entire library of video tutorials.
Learn More
Subtitles of the Movie (Designing and Developing ASP.NET 4 Web Apps (Exam 70-519) / Extensible Request Validation / HTML Encoding)
HTML Encoding is such a normal part of everything that's done on the web that a lot of times we kind of gloss of over this and everyone just reads about HTML Encoding and they just kind of like, well okay, that's, that's what's happening. Well, there's a new functionality built into ASP.NET 4 that you need to be aware of going into the exam and you need this in real life and this is a better, faster, easier way to do HTML Encoding. Well let's start of and talk about what exactly is HTML Encoding? Well it is the way that the browser understands how to translate the HTML that it receives into strings that shows up on the display for the end-user to see. Now the conversion of certain symbols into strings allows the browser to safely produce those symbols and here's a good example. Script, if, if I pass a browser the script, the word script, let's do it this way. The word script inside these angled brackets, that tells the browser to do something to take action, to run this code, but if I encode it, then it shows up to the browser as the ampersand LT semicolon script ampersand GT semi colon. This version tells the browser how to represent it and not to execute it as code. This version would tell it to execute it as a code. Now why would we want to do Encoding? Because we want to make sure that someone is not trying to hijack our browser or pass some code into our browser in a way that we weren't anticipating. And why are we doing this? Again we're trying to prevent those cross-site scripting attacks or XSS attacks. Keep in mind, all of this is based on a security intrusion that could be grouped under a term called Injection. If I can inject code into the URL, into the HTML, into the browser, whatever way, if I can inject some code that will run and report back to me information about your system or damage some data in your system or steal some data, then you know, as, as a hacker, I've achieved my goal. And so as a developer, we want to make sure that we write our applications in a way to watch for these kinds of possible attacks. Now there is a new way to implement html Encoding in ASP.NET 4. It's very easy but you have to watch closely and this is a New Tag and if you remember we had this Bracket Pound Sign Tag in prior versions of ASP.NET and it had an equal sign. Now when you see the colon after the pound sign, this is going to automatically implement HTML Encoding. And the best way to understand this and see what it does, is to take a look at another video in this course that's entitled HTML Encoding Example because I'll open up Visual Web Developer there and we'll take a look at using this new Encoding Tag. So that's HTML Encoding is, you need to be aware of this, real life and on the exam and again check out that video and I'll show you exactly what this stuff does.
Tutorial Information
| Course: | Designing and Developing ASP.NET 4 Web Apps (Exam 70-519) |
| Author: | Mark Long |
| SKU: | 34292 |
| ISBN: | 978-1-61866-029-9 |
| Release Date: | 2011-12-31 |
| Duration: | 8.5 hrs / 108 lessons |
| Work Files: |
Yes |
| Captions: | No |
| Compatibility: |
Vista/XP/2000, OS X, Linux QuickTime 7, Flash 8 |
VTC Sign up & Benefits
- Unlimited Access
- 81,350 Video Tutorials (14,200 free)
- Video Available as Flash or QuickTime
- Over 715 Courses
- $30 for One Month Access
- Multi-User Discounts Available
