Code:
/ Dotnetfx_Vista_SP2 / Dotnetfx_Vista_SP2 / 8.0.50727.4016 / DEVDIV / depot / DevDiv / releases / whidbey / NetFxQFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- ObjectStateManager.cs
- AnimationClock.cs
- CasesDictionary.cs
- MimePart.cs
- EdgeModeValidation.cs
- Monitor.cs
- ConsumerConnectionPointCollection.cs
- LocalizableResourceBuilder.cs
- ConfigurationLockCollection.cs
- TagMapInfo.cs
- ScriptResourceDefinition.cs
- DbProviderFactories.cs
- PointAnimationClockResource.cs
- BitmapEffectOutputConnector.cs
- ListControlDesigner.cs
- NetPipeSectionData.cs
- EncodingNLS.cs
- WebPartTransformer.cs
- EventMappingSettingsCollection.cs
- SHA384Managed.cs
- DownloadProgressEventArgs.cs
- PriorityItem.cs
- CompositeControl.cs
- RenameRuleObjectDialog.Designer.cs
- FontFamily.cs
- HtmlInputText.cs
- DataServiceQueryProvider.cs
- OdbcParameterCollection.cs
- DbException.cs
- MembershipValidatePasswordEventArgs.cs
- QuaternionKeyFrameCollection.cs
- SmtpNtlmAuthenticationModule.cs
- DrawingContextDrawingContextWalker.cs
- SecurityTokenTypes.cs
- SqlMultiplexer.cs
- ModelVisual3D.cs
- ListViewCancelEventArgs.cs
- ByteStorage.cs
- BindingContext.cs
- SplitterEvent.cs
- NegationPusher.cs
- ParserContext.cs
- HostedHttpTransportManager.cs
- RuleSetDialog.cs
- EndCreateSecurityTokenRequest.cs
- _Events.cs
- XmlSchemaSearchPattern.cs
- DataGridCellAutomationPeer.cs
- IgnoreSectionHandler.cs
- ColumnHeaderConverter.cs
- ColorDialog.cs
- NameValueSectionHandler.cs
- DeferredBinaryDeserializerExtension.cs
- SessionParameter.cs
- SerializationEventsCache.cs
- ImageListDesigner.cs
- FloaterBaseParaClient.cs
- GenericsInstances.cs
- Int16.cs
- LeafCellTreeNode.cs
- PropertyEmitter.cs
- XmlSchemaAny.cs
- SQLBoolean.cs
- HttpListenerException.cs
- MaskPropertyEditor.cs
- NoPersistScope.cs
- RtfToXamlLexer.cs
- FixedTextContainer.cs
- TdsRecordBufferSetter.cs
- DataGridViewAdvancedBorderStyle.cs
- AttributeExtensions.cs
- BlurBitmapEffect.cs
- DataKey.cs
- COM2FontConverter.cs
- RtfFormatStack.cs
- TextElementCollection.cs
- CmsUtils.cs
- ETagAttribute.cs
- SequenceFullException.cs
- Attribute.cs
- SecurityDescriptor.cs
- PageThemeCodeDomTreeGenerator.cs
- ConsumerConnectionPoint.cs
- KnownBoxes.cs
- PermissionAttributes.cs
- Geometry.cs
- MatcherBuilder.cs
- DataList.cs
- EllipseGeometry.cs
- DragEventArgs.cs
- ObjectDataSourceMethodEventArgs.cs
- XmlSchemaNotation.cs
- TextDecorationCollection.cs
- SQLGuid.cs
- NetworkInformationPermission.cs
- EnumerableCollectionView.cs
- OrderByExpression.cs
- AssociationTypeEmitter.cs
- XmlIgnoreAttribute.cs
- _SafeNetHandles.cs