<2007 November>
SunMonTueWedThuFriSat
28293031123
45678910
11121314151617
18192021222324
2526272829301
2345678

On this page...

Search

Links

Member of...


ASP Insiders

MVP Visual Developer ASP/ASP.NET

Enter CodeZone

Blog Categories

Microsoft

Blogroll

Deutsche Resourcen

Management

Sign In
 

#  Friday, 02 November 2007

XSSDetect is a static code analysis tool that helps identify Cross-Site Scripting security flaws found within Web applications. It is able to scan compiled managed assemblies (C#, Visual Basic .NET, J#) and analyze dataflow paths from sources of user-controlled input to vulnerable outputs. It also detects whether proper encoding or filtering has been applied to the data and will ignore such "sanitized" paths. Download

Categories: .NET | ASP.NET | Security | Visual Studio
Friday, 02 November 2007 12:51:21 (W. Europe Standard Time, UTC+01:00)  #    Comments [1]

 



#  Tuesday, 30 October 2007

Article at The Register: How ASP.NET began in Java. Reminds me of the "C# is COOL" t-shirt I have...

Categories: .NET | ASP.NET
Tuesday, 30 October 2007 17:12:41 (W. Europe Standard Time, UTC+01:00)  #    Comments [0]

 



#  Tuesday, 23 October 2007

There is absolutely no excuse to not read Hard Code, the book version of I.M. Wright's (49) columns. Get it. Read it. Now!

Categories: Books | Project Management
Tuesday, 23 October 2007 13:33:48 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Sunday, 21 October 2007

If you are interested in IronPython, you should check out Matt's latest SharpDevelop addin: IronPython Integration In SharpDevelop 2.2. His blog post details the status of code completion, Windows Forms designer support, plus: converting code from C# or VB.NET to IronPython.

Please note that this is a work in progress, and that the official release of this addin will be for SharpDevelop 3 and IronPython 2.0.

Categories: .NET | Use the source Luke
Sunday, 21 October 2007 19:36:15 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Monday, 15 October 2007

Been on holidays, at conferences (eg last week Ask The Experts @ XTOPIA in Berlin), and worked on various projects - a couple of reasons it was rather quiet lately in this blog.

Yesterday I decided I needed a simple guestbook application for a to-be-developed private Web site, and because I didn't find anything that fit my needs I decided to write one myself with the goal of (ab)using XLinq in the course of this endeavour:

Guestbook_XLINQ.zip (7.09 KB)

Caveat emptor: I am no designer (surprise!). But thanks to no design it should be easy for you to add your own design. However, as this month's MSDN magazine is all about security, I decided to make the application production-ready security-wise. You'll find a lot of parsing plus XSRF protection (note: this version does not check for integer overflow in calculating the start row).

Missing features: this guestbook is not prepared for localization, nor does it use a control-based approach (where you drop those in your pages and get an in-place guestbook).

Update a version of this application for VS2008 RTM is available here.

Categories: 3.5 | ASP.NET | Security | Use the source Luke
Monday, 15 October 2007 09:56:36 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Friday, 31 August 2007

Been following tf4mono development for quite a while, and now there is an installer that works on Windows with .NET 2.0 (more info). Be sure to check out the comments as it doesn't seem to work on a machine with Team Explorer already installed.

Friday, 31 August 2007 10:05:14 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Thursday, 30 August 2007

I ran into a snag last night - I imported a db schema (created via Visio / Generate) into a DB Pro project in VS 2008 Beta 2 DB Pro edition. Then I tried to build & deploy into SQL Express (the one that comes in the TFS / VSTS preconfigured VPC). And it balked.

The error message on TSD158 I got wasn't like the one described in the MSDN Forums post Extending Timeout on SqlBuildTask, however, I decided to look into the registry anyways. Interestingly enough, the value for the key LongRunningQueryTimeoutSeconds was zero. Increased that to 120, restarted VS, presto: build is now working!

Categories: Team System | Visual Studio
Thursday, 30 August 2007 10:16:41 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Thursday, 16 August 2007

In my previous post FastCGI in IIS7 I mentioned that I am running WebSVN on this box to give FastCGI a real-world test run. Today, I upgraded to v2.0 of WebSVN. They sure do ship a good-looking template this time around:

The RSS functionality is enabled too in this version (I was running code directly from their repository last time around...). I have to say that WebSVN turned into a must-have tool for anyone using Subversion.

Link to WebSVN on iis7.chrison.net (feel free to play around)

Categories: IIS | Subversion
Thursday, 16 August 2007 15:22:40 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Friday, 10 August 2007
Version 2 of the IE7 Desktop Security Guide is available for download. If you are interested in locking down IE7, then you will need this document.
Categories: Administration | Security
Friday, 10 August 2007 09:55:34 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



#  Thursday, 09 August 2007

Yesterday, I adapted the code comment checkin policy for Team Foundation Server to work with VSTS 2008 ("Orcas") Beta 2. It is functionally equivalent to version 2.1.1 (download) for Visual Studio Team System 2005, therefore you configure it once for a team project, and then it is used both by 2005 & 2008. However, please note the parser doesn't yet fully understand all C# 3.0 constructs, so there might be "false positives".

Download test version here.

Categories: Team System | Visual Studio
Thursday, 09 August 2007 09:56:44 (W. Europe Daylight Time, UTC+02:00)  #    Comments [0]

 



© Copyright 2017 Christoph Wille

newtelligence dasBlog 2.3.9074.18820
Subscribe to this weblog's RSS feed with SharpReader, Radio Userland, NewsGator or any other aggregator listening on port 5335 by clicking this button.   RSS 2.0|Atom 1.0  Send mail to the author(s)

 
Don't contact us via this (fleischfalle@alphasierrapapa.com) email address.