Code:
/ Dotnetfx_Vista_SP2 / Dotnetfx_Vista_SP2 / 8.0.50727.4016 / DEVDIV / depot / DevDiv / releases / whidbey / NetFxQFE / ndp / fx / src / xsp / System / Web / Security / CookieProtection.cs / 1 / CookieProtection.cs
//------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007. //------------------------------------------------------------------------------ //// Copyright (c) Microsoft Corporation. All rights reserved. // //----------------------------------------------------------------------------- namespace System.Web.Security { using System.Security.Cryptography; using System.Web.Configuration; using System.Web.Management; public enum CookieProtection { None, Validation, Encryption, All } internal class CookieProtectionHelper { internal static string Encode (CookieProtection cookieProtection, byte [] buf, int count) { if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { byte[] bMac = MachineKeySection.HashData (buf, null, 0, count); if (bMac == null || bMac.Length != 20) return null; if (buf.Length >= count + 20) { Buffer.BlockCopy (bMac, 0, buf, count, 20); } else { byte[] bTemp = buf; buf = new byte[count + 20]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); Buffer.BlockCopy (bMac, 0, buf, count, 20); } count += 20; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (true, buf, null, 0, count); count = buf.Length; } if (count < buf.Length) { byte[] bTemp = buf; buf = new byte[count]; Buffer.BlockCopy (bTemp, 0, buf, 0, count); } return HttpServerUtility.UrlTokenEncode(buf); } internal static byte[] Decode (CookieProtection cookieProtection, string data) { byte [] buf = HttpServerUtility.UrlTokenDecode(data); if (buf == null || cookieProtection == CookieProtection.None) return buf; if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Encryption) { buf = MachineKeySection.EncryptOrDecryptData (false, buf, null, 0, buf.Length); if (buf == null) return null; } if (cookieProtection == CookieProtection.All || cookieProtection == CookieProtection.Validation) { ////////////////////////////////////////////////////////////////////// // Step 2: Get the MAC: Last 20 bytes if (buf.Length <= 20) return null; byte[] buf2 = new byte[buf.Length - 20]; Buffer.BlockCopy (buf, 0, buf2, 0, buf2.Length); byte[] bMac = MachineKeySection.HashData (buf2, null, 0, buf2.Length); ////////////////////////////////////////////////////////////////////// // Step 3: Make sure the MAC is correct if (bMac == null || bMac.Length != 20) return null; for (int iter = 0; iter < 20; iter++) if (bMac[iter] != buf[buf2.Length + iter]) return null; buf = buf2; } return buf; } } } // File provided for Reference Use Only by Microsoft Corporation (c) 2007.
Link Menu
This book is available now!
Buy at Amazon US or
Buy at Amazon UK
- ValidatorCollection.cs
- OuterGlowBitmapEffect.cs
- ProfilePropertyNameValidator.cs
- OleAutBinder.cs
- StorageTypeMapping.cs
- ValuePattern.cs
- RenderOptions.cs
- IResourceProvider.cs
- RootProfilePropertySettingsCollection.cs
- Int64.cs
- SmiMetaDataProperty.cs
- EpmSyndicationContentDeSerializer.cs
- GuidelineSet.cs
- DataSourceCache.cs
- MarshalByValueComponent.cs
- NativeActivityFaultContext.cs
- NumberFunctions.cs
- ListControl.cs
- ActivationArguments.cs
- ExpressionBuilder.cs
- StoreContentChangedEventArgs.cs
- SizeAnimationBase.cs
- GroupedContextMenuStrip.cs
- HtmlTextArea.cs
- DictionaryManager.cs
- StructuralType.cs
- PointAnimationClockResource.cs
- DefaultWorkflowSchedulerService.cs
- SqlDataSourceCustomCommandEditor.cs
- SqlConnectionString.cs
- NativeMethods.cs
- FastPropertyAccessor.cs
- PenCursorManager.cs
- addressfiltermode.cs
- TakeQueryOptionExpression.cs
- ErasingStroke.cs
- IssuerInformation.cs
- Lease.cs
- ILGenerator.cs
- FileUpload.cs
- NumberAction.cs
- PageContentCollection.cs
- ConfigurationSection.cs
- PageRequestManager.cs
- ConfigurationManagerInternalFactory.cs
- Utils.cs
- SqlReferenceCollection.cs
- ResXResourceSet.cs
- SettingsPropertyWrongTypeException.cs
- AppLevelCompilationSectionCache.cs
- HttpListenerRequest.cs
- CompilationSection.cs
- LOSFormatter.cs
- SafeCertificateContext.cs
- ObjectStateEntryBaseUpdatableDataRecord.cs
- PathFigureCollection.cs
- BufferedResponseStream.cs
- BamlRecordReader.cs
- CompilationUnit.cs
- UdpTransportSettings.cs
- PreviewPageInfo.cs
- UIElementParagraph.cs
- RepeatBehavior.cs
- DetailsViewPagerRow.cs
- MimeMapping.cs
- BinaryCommonClasses.cs
- XsltCompileContext.cs
- TypeTypeConverter.cs
- TiffBitmapEncoder.cs
- BitmapSourceSafeMILHandle.cs
- MSAANativeProvider.cs
- ConstructorBuilder.cs
- HtmlAnchor.cs
- _FtpDataStream.cs
- WindowsTab.cs
- BaseParagraph.cs
- CRYPTPROTECT_PROMPTSTRUCT.cs
- SQLUtility.cs
- EmptyArray.cs
- Variant.cs
- AdapterDictionary.cs
- StrongNameKeyPair.cs
- SharedPersonalizationStateInfo.cs
- AsyncPostBackErrorEventArgs.cs
- SoapFormatExtensions.cs
- TextChange.cs
- Converter.cs
- HtmlTableCell.cs
- CacheChildrenQuery.cs
- EntityDataSourceStatementEditor.cs
- Parser.cs
- BaseResourcesBuildProvider.cs
- DoubleUtil.cs
- CellConstantDomain.cs
- TypeToken.cs
- SizeLimitedCache.cs
- LingerOption.cs
- SapiAttributeParser.cs
- ProcessInputEventArgs.cs
- StylusPointProperties.cs