Changes between Version 7 and Version 8 of WikiStart
- Timestamp:
- 01/27/14 11:55:54 (11 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
WikiStart
v7 v8 161 161 Here we use the default ASP.NET session id which is stored in cookies to ensure that users can't inadvertently leak their private URL. 162 162 163 == {{{Page.OnPreInit}} ==163 == {{{Page.OnPreInit}}} == 164 164 165 165 The last step is to add continuation validation at some point in the page lifecycle. Clavis checks that all the protected parameters hash to the same HMAC value as specified in the URL. If they don't, an exception was thrown indicating that a protected parameter was incorrectly changed. I typically do this in Page.OnPreInit in a custom System.Web.Page base class: