Tag
.NET Security
2 posts tagged with this.
-
Mitigating Recent ASP.NET Core Request Handling Risks
A recent Microsoft advisory addresses flaws in how ASP.NET Core processes certain HTTP requests under load-balanced or reverse-proxy setups. Production sites must apply configuration changes and runtime updates to prevent potential smuggling or injection vectors.
-
Mitigating Recent .NET Deserialization Risks in Production
A recent advisory warns of unsafe object deserialization paths in ASP.NET Core workloads. Production sites on Windows Server and IIS must apply targeted configuration and code changes to reduce exposure.