security - Open Redirect or Header Manipulation issues from Fortify scan on asp.net -

-

we did fortify scan on our asp.net application. found there many header manipulation issues. issues pointing response.redirect(). please have @ below code encoded parameters. below code counted header manipulation issue.

            int icount = 0;             foreach (string name in request.querystring.keys)             {                 icount++;                 if (icount > 1)                 {                     url += "&";                 }                 url += name;                 if (request.params[name]!=null)                 {                     url += "=" + antixss.urlencode(request.params[name]);                 }             }             response.redirect(server.urlpathencode(page.root) + "\test.aspx?" + url);

can body let me know else required change here resolve issue?

take off server.urlpathencode(page.root) portion , use server.transfer() instead of response.redirect().

server.transfer() transfers user page on same site , poses little no danger of accidentally directing site.

response.redirect() when want redirect site.

also, fortify doesn't tend request.params[] due possible ambiguity. careful attacker may able, on servers, send utf-7 or non-printing version of name 1 of request variables , let name of variable contain actual xss injection, or overwrite get-request value cookie of same name. make sure both name , value htmlencoded, , consider using request.querystring[parametername] instead of request.params[parametername] avoid more issues fortify.

hopefully gets past fortify issues!


Comments

Post a Comment

Popular posts from this blog

c# - HttpResponseMessage System.InvalidOperationException -

-
quite simple problem i've got easy solve reckon brains. it's tried different queries on google , nothing popped hey that's why here. here error: system.invalidoperationexception basically error thrown on piece of code here string test = response.content.headers.getvalues("location").firstordefault(); location in fiddler looks this: location: https://www.redirecturlishere.com/blah here entire function: private async task<string> getrequest() { //httpcontent postcontent = new stringcontent(post, encoding.ascii, "application/x-www-form-urlencoded"); using (httpresponsemessage response = await httpclient.getasync( "http://www.cant-share-url.com")) { using (httpcontent content = response.content) { string test = response.content.headers.getvalues("location").firstordefault(); } } return ""; ...
Read more

sql - Postgresql error: "failed to find conversion function from unknown to text" -

-
i have following postgresql query: ( select '201405mase04' testid, count(*) totq, count(distinct case when se1 = '' null else se1 end) totse, case when count(*)=0 7 else count(distinct rc) end totrc eivtestitems ti, eivtests t ti.test_id = t.test_id , t.test_type_id = 1 , t.test_id= '201405mase04' , ti.omit <> 1 ), b ( select '201405mase04' testid, count(*) totq eivtestitems ti, eivtests t ti.test_id = t.test_id , t.test_type_id = 1 , t.test_id= '201405mase04' , ti.omit = 1 ), c ( select '201405mase04' testid, count(*) totq eivtestitems ti, eivtests t ti.test_id = t.test_id , t.test_type_id = 1 , t.test_id= '201405mase04' , ti....
Read more