Code:
/ FX-1434 / FX-1434 / 1.0 / untmp / whidbey / REDBITS / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } }
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- FrameworkPropertyMetadata.cs
- DataGridViewComboBoxEditingControl.cs
- DbParameterCollectionHelper.cs
- SortQuery.cs
- TabletDevice.cs
- WindowsEditBox.cs
- AutoResetEvent.cs
- UpdateRecord.cs
- Triplet.cs
- Control.cs
- WeakEventManager.cs
- TableLayoutSettings.cs
- EdmToObjectNamespaceMap.cs
- BufferedGenericXmlSecurityToken.cs
- LayoutTable.cs
- SchemaImporterExtensionElement.cs
- ContentDisposition.cs
- FileSecurity.cs
- DbProviderFactory.cs
- AttributeQuery.cs
- SafeEventLogWriteHandle.cs
- PipelineDeploymentState.cs
- JsonQNameDataContract.cs
- HtmlTitle.cs
- HttpWebRequestElement.cs
- ResourceContainer.cs
- Keyboard.cs
- DataGridViewCellStyleConverter.cs
- HtmlCalendarAdapter.cs
- RandomNumberGenerator.cs
- SqlDataSourceCommandEventArgs.cs
- ActivityDesigner.cs
- Encoder.cs
- SevenBitStream.cs
- SpecialNameAttribute.cs
- RectValueSerializer.cs
- SqlCacheDependencyDatabase.cs
- TextServicesPropertyRanges.cs
- WebRequestModuleElementCollection.cs
- NamedPipeTransportElement.cs
- DownloadProgressEventArgs.cs
- RemoteWebConfigurationHostStream.cs
- DecoderNLS.cs
- DiscoveryClientDocuments.cs
- DetailsViewDeletedEventArgs.cs
- SqlUdtInfo.cs
- CipherData.cs
- COM2ComponentEditor.cs
- NamespaceMapping.cs
- ApplicationTrust.cs
- ImageCodecInfo.cs
- VerticalAlignConverter.cs
- EdmItemError.cs
- DataBoundControlAdapter.cs
- WhitespaceRuleReader.cs
- PropertyStore.cs
- CodeRegionDirective.cs
- RTLAwareMessageBox.cs
- ObjectItemNoOpAssemblyLoader.cs
- EntityClientCacheKey.cs
- AutoSizeComboBox.cs
- ReadOnlyMetadataCollection.cs
- EventDescriptor.cs
- Component.cs
- ReflectionTypeLoadException.cs
- NumericUpDownAcceleration.cs
- DataGridViewCellStyleChangedEventArgs.cs
- ColumnWidthChangedEvent.cs
- FormDocumentDesigner.cs
- IPipelineRuntime.cs
- RuntimeArgumentHandle.cs
- basecomparevalidator.cs
- EventMappingSettings.cs
- CharEnumerator.cs
- MatcherBuilder.cs
- SafeNativeMemoryHandle.cs
- PickBranchDesigner.xaml.cs
- XhtmlBasicValidatorAdapter.cs
- ReachUIElementCollectionSerializer.cs
- OleAutBinder.cs
- CalendarTable.cs
- ByteViewer.cs
- FileUpload.cs
- MarkupCompiler.cs
- ProgressBarAutomationPeer.cs
- LinkClickEvent.cs
- DistributedTransactionPermission.cs
- Timer.cs
- OperatingSystem.cs
- _ConnectOverlappedAsyncResult.cs
- CodeTypeMemberCollection.cs
- DataGridViewRowHeightInfoPushedEventArgs.cs
- StackOverflowException.cs
- FixedTextSelectionProcessor.cs
- ListDictionaryInternal.cs
- SerializationFieldInfo.cs
- QilList.cs
- MetadataPropertyCollection.cs
- CqlLexerHelpers.cs
- TextServicesCompartmentEventSink.cs