Code:
/ 4.0 / 4.0 / untmp / DEVDIV_TFS / Dev10 / Releases / RTMRel / ndp / fx / src / xsp / System / Web / Util / RequestValidator.cs / 1305376 / RequestValidator.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- /* * Base class providing extensibility hooks for custom request validation * * Copyright (c) 2009 Microsoft Corporation */ namespace System.Web.Util { using System; using System.Diagnostics.CodeAnalysis; using System.Threading; using System.Web; using System.Web.Configuration; public class RequestValidator { private static RequestValidator _customValidator; private static readonly Lazy_customValidatorResolver = new Lazy (GetCustomValidatorFromConfig); public static RequestValidator Current { get { if (_customValidator == null) { _customValidator = _customValidatorResolver.Value; } return _customValidator; } set { if (value == null) { throw new ArgumentNullException("value"); } _customValidator = value; } } private static RequestValidator GetCustomValidatorFromConfig() { // App since this is static per AppDomain RuntimeConfig config = RuntimeConfig.GetAppConfig(); HttpRuntimeSection runtimeSection = config.HttpRuntime; string validatorTypeName = runtimeSection.RequestValidationType; // validate the type Type validatorType = ConfigUtil.GetType(validatorTypeName, "requestValidationType", runtimeSection); ConfigUtil.CheckBaseType(typeof(RequestValidator) /* expectedBaseType */, validatorType, "requestValidationType", runtimeSection); // instantiate RequestValidator validator = (RequestValidator)HttpRuntime.CreatePublicInstance(validatorType); return validator; } internal static void InitializeOnFirstRequest() { // instantiate the validator if it hasn't already been created RequestValidator validator = _customValidatorResolver.Value; } private static bool IsAtoZ(char c) { return (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z'); } [SuppressMessage("Microsoft.Design", "CA1021:AvoidOutParameters", Justification = "This is an appropriate way to return multiple pieces of data.")] protected internal virtual bool IsValidRequestString(HttpContext context, string value, RequestValidationSource requestValidationSource, string collectionKey, out int validationFailureIndex) { if (requestValidationSource == RequestValidationSource.Headers) { validationFailureIndex = 0; return true; // Ignore Headers collection in the default implementation } return !CrossSiteScriptingValidation.IsDangerousString(value, out validationFailureIndex); } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- NegotiateStream.cs
- EntityContainerEmitter.cs
- DataMisalignedException.cs
- DictionaryMarkupSerializer.cs
- DbInsertCommandTree.cs
- ApplicationContext.cs
- PatternMatcher.cs
- Win32MouseDevice.cs
- ISFClipboardData.cs
- DataSourceSelectArguments.cs
- ClientTarget.cs
- BindingOperations.cs
- StylusPointProperties.cs
- DbReferenceCollection.cs
- IdentityModelStringsVersion1.cs
- ProcessThreadCollection.cs
- PageCache.cs
- BindToObject.cs
- EntityDataSourceWrapper.cs
- ReadOnlyTernaryTree.cs
- FontUnit.cs
- WebPartMenuStyle.cs
- OleDbMetaDataFactory.cs
- ConnectionStringSettings.cs
- ResolveDuplexCD1AsyncResult.cs
- DataControlFieldHeaderCell.cs
- MatcherBuilder.cs
- GrowingArray.cs
- MetadataReference.cs
- DataGridViewRowDividerDoubleClickEventArgs.cs
- ConfigurationManagerHelper.cs
- FontSourceCollection.cs
- Conditional.cs
- EncryptedType.cs
- SafeFileMappingHandle.cs
- WindowsNonControl.cs
- GridViewColumnHeader.cs
- ZipIOFileItemStream.cs
- StringAnimationBase.cs
- PtsHelper.cs
- DataGridViewCellPaintingEventArgs.cs
- SortExpressionBuilder.cs
- TableItemProviderWrapper.cs
- ObjectDisposedException.cs
- Serialization.cs
- PeerTransportCredentialType.cs
- HealthMonitoringSection.cs
- WebControlParameterProxy.cs
- WorkflowInstanceUnhandledExceptionRecord.cs
- XmlBindingWorker.cs
- NavigationHelper.cs
- GlyphInfoList.cs
- DebugController.cs
- CompleteWizardStep.cs
- IdentityReference.cs
- OleDbConnection.cs
- TextTreeObjectNode.cs
- RoleExceptions.cs
- FormViewPageEventArgs.cs
- ExtendedTransformFactory.cs
- ConstNode.cs
- GlobalAclOperationRequirement.cs
- EdmValidator.cs
- MetafileHeader.cs
- XmlTextAttribute.cs
- DbProviderFactories.cs
- SourceFileBuildProvider.cs
- StrokeCollection2.cs
- InputEventArgs.cs
- WmpBitmapDecoder.cs
- DataGridViewElement.cs
- KnownTypesProvider.cs
- DataControlExtensions.cs
- ObjectQueryProvider.cs
- QueryAsyncResult.cs
- NamespaceMapping.cs
- TextBox.cs
- SynchronizationLockException.cs
- ColorConvertedBitmapExtension.cs
- DataGridItemAttachedStorage.cs
- NetworkInterface.cs
- TreeView.cs
- Char.cs
- Substitution.cs
- COM2TypeInfoProcessor.cs
- BufferedStream2.cs
- HttpResponseInternalWrapper.cs
- RadioButtonPopupAdapter.cs
- XamlTreeBuilderBamlRecordWriter.cs
- FontDifferentiator.cs
- FixedSOMPageElement.cs
- ControlUtil.cs
- FileResponseElement.cs
- WindowsFormsSectionHandler.cs
- WindowsGraphics2.cs
- ManualResetEvent.cs
- LocalIdKeyIdentifierClause.cs
- ConfigXmlSignificantWhitespace.cs
- ToolboxItemFilterAttribute.cs
- CodeAttributeDeclarationCollection.cs