Code:
/ 4.0 / 4.0 / untmp / DEVDIV_TFS / Dev10 / Releases / RTMRel / ndp / fx / src / xsp / System / Web / Util / RequestValidator.cs / 1305376 / RequestValidator.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- /* * Base class providing extensibility hooks for custom request validation * * Copyright (c) 2009 Microsoft Corporation */ namespace System.Web.Util { using System; using System.Diagnostics.CodeAnalysis; using System.Threading; using System.Web; using System.Web.Configuration; public class RequestValidator { private static RequestValidator _customValidator; private static readonly Lazy_customValidatorResolver = new Lazy (GetCustomValidatorFromConfig); public static RequestValidator Current { get { if (_customValidator == null) { _customValidator = _customValidatorResolver.Value; } return _customValidator; } set { if (value == null) { throw new ArgumentNullException("value"); } _customValidator = value; } } private static RequestValidator GetCustomValidatorFromConfig() { // App since this is static per AppDomain RuntimeConfig config = RuntimeConfig.GetAppConfig(); HttpRuntimeSection runtimeSection = config.HttpRuntime; string validatorTypeName = runtimeSection.RequestValidationType; // validate the type Type validatorType = ConfigUtil.GetType(validatorTypeName, "requestValidationType", runtimeSection); ConfigUtil.CheckBaseType(typeof(RequestValidator) /* expectedBaseType */, validatorType, "requestValidationType", runtimeSection); // instantiate RequestValidator validator = (RequestValidator)HttpRuntime.CreatePublicInstance(validatorType); return validator; } internal static void InitializeOnFirstRequest() { // instantiate the validator if it hasn't already been created RequestValidator validator = _customValidatorResolver.Value; } private static bool IsAtoZ(char c) { return (c >= 'a' && c <= 'z') || (c >= 'A' && c <= 'Z'); } [SuppressMessage("Microsoft.Design", "CA1021:AvoidOutParameters", Justification = "This is an appropriate way to return multiple pieces of data.")] protected internal virtual bool IsValidRequestString(HttpContext context, string value, RequestValidationSource requestValidationSource, string collectionKey, out int validationFailureIndex) { if (requestValidationSource == RequestValidationSource.Headers) { validationFailureIndex = 0; return true; // Ignore Headers collection in the default implementation } return !CrossSiteScriptingValidation.IsDangerousString(value, out validationFailureIndex); } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu

This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- DataServiceExpressionVisitor.cs
- DiagnosticsConfiguration.cs
- XPathEmptyIterator.cs
- RolePrincipal.cs
- PtsHelper.cs
- ModuleElement.cs
- Point3DValueSerializer.cs
- FastEncoder.cs
- XmlElementAttribute.cs
- ScrollItemPatternIdentifiers.cs
- MarshalByValueComponent.cs
- FixedSOMTableCell.cs
- elementinformation.cs
- DataTableExtensions.cs
- EventHandlersStore.cs
- FrameworkRichTextComposition.cs
- GacUtil.cs
- SocketElement.cs
- MergablePropertyAttribute.cs
- ResourceManagerWrapper.cs
- MarkupCompiler.cs
- ScriptingRoleServiceSection.cs
- DataListItem.cs
- BindToObject.cs
- MetadataArtifactLoaderComposite.cs
- SrgsGrammar.cs
- PipelineModuleStepContainer.cs
- Literal.cs
- DragDropHelper.cs
- Slider.cs
- UmAlQuraCalendar.cs
- BindableAttribute.cs
- BitStream.cs
- GroupDescription.cs
- ObjectFactoryCodeDomTreeGenerator.cs
- SafeNativeMethods.cs
- XmlSerializerVersionAttribute.cs
- ForeignKeyConstraint.cs
- Timeline.cs
- SchemaElementDecl.cs
- Rect.cs
- UnsafeNativeMethods.cs
- LocalizationComments.cs
- DetailsViewRow.cs
- HandlerFactoryWrapper.cs
- TileBrush.cs
- StringInfo.cs
- WindowsFormsSynchronizationContext.cs
- XamlToRtfParser.cs
- _SslSessionsCache.cs
- FileSystemEventArgs.cs
- AttachedPropertyMethodSelector.cs
- SessionConnectionReader.cs
- Compilation.cs
- StringFormat.cs
- HostProtectionPermission.cs
- ToolStripPanel.cs
- ActionFrame.cs
- Debug.cs
- XmlMembersMapping.cs
- TargetParameterCountException.cs
- EntityTypeEmitter.cs
- QueryCorrelationInitializer.cs
- SqlOuterApplyReducer.cs
- ButtonRenderer.cs
- InlineObject.cs
- MasterPageParser.cs
- BuilderInfo.cs
- ImpersonateTokenRef.cs
- TraversalRequest.cs
- ThreadStaticAttribute.cs
- DiscreteKeyFrames.cs
- XmlRawWriterWrapper.cs
- RelationshipManager.cs
- ListBindableAttribute.cs
- AnnotationHighlightLayer.cs
- PropertyConverter.cs
- AutomationAttributeInfo.cs
- QilStrConcat.cs
- DataGridTablesFactory.cs
- GraphicsPathIterator.cs
- DataGridViewHitTestInfo.cs
- BindingRestrictions.cs
- cookiecontainer.cs
- ProcessHostConfigUtils.cs
- PolicyUnit.cs
- ArgIterator.cs
- PointConverter.cs
- CatalogPart.cs
- SystemInformation.cs
- HttpProfileGroupBase.cs
- ButtonBase.cs
- Content.cs
- RequestQueue.cs
- DocumentXPathNavigator.cs
- WebPartEditorCancelVerb.cs
- SspiWrapper.cs
- uribuilder.cs
- GradientSpreadMethodValidation.cs
- ComponentCollection.cs