asp.net - What are the possible threats while calling web services by using JQuery and how can avoid them? -


i know question can generic purposes of narrowing question, here brief description:

i'm planning forget asp.net updatepanel , move use ajax via jquery. afraid because of plain, client-side nature of javascript (and consequently jquery code), 1 looking web page's source can realize url of web services i'm calling , being passed web services.

when using updatepanel these types of operations, i'm sure calling web services done on server-side , have no concern regarding issues of information on calling sensitive web services being exposed publicly i'm planning use ajax via jquery, worries me alot.

are concerns reasonable , if true, best solutions avoiding threats of web-service-calling-info being exposed?

clarification: when saying updatepanel, mean utilizing chain of techiques including asp.net ajax, code-behind , relying on server-side dlls performing async server-side operations instead of jquery ajax requires web services intracting server.

there no way on internet protect web services time hiding url. not sure when updatepanel web service call server not taking true power of ajax.

one way secure web service use authentication in web service side. example need send authentication key every time access source, , common, have many public web service protects self using auth key openid implementation. in case not want change web service logic think jquery way of ajax not secure option.

here's thought, can have 2 levels of web service, 1 open can use in jquery. current web service, server side call other secure web service. can configure incoming request specific machine ip.

in case other own server no body else can access web service securely kept behind firewall. similar while connecting database server application server.

let me know if helps.


Comments

Post a Comment

Popular posts from this blog

monitor web browser programmatically in Android? -

i've got tricky question here. need users make payment bank (namely barclaycard) in uk. so, have https url , add parameters (such amount pay, order reference, etc) url, start http connection intent.actionview, redirect user browser can enter credit card details on bank's webpage , make payment our account successfully. far ? the code use below (i changed values privacy reasons) problem is, need app when user has completed/failed/cancelled payment. barclaycardautomatically redirects particular url when payment has succeeded, 1 if failed. there no way of knowing when barclaycard payment has succeeded go android app somehow ? button cardbutton = (button) findviewbyid(r.id.card_button); cardbutton.setonclicklistener(new view.onclicklistener() { @override public void onclick(view arg0) { string prehashstring = new string(); string prohashstring = new string(); string shapassphrase = new string(); shapassphrase = "gsvth£h70zkh...
Read more

Shrink a YouTube video to responsive width -

i have youtube video embedded on our website , when shrink screen tablet or phone sizes stops shrinking @ around 560px in width. standard youtube videos or there can add code make go smaller? you can make youtube videos responsive css. wrap iframe in div class of "videowrapper" , apply following styles: .videowrapper { float: none; clear: both; width: 100%; position: relative; padding-bottom: 56.25%; padding-top: 25px; height: 0; } .videowrapper iframe { position: absolute; top: 0; left: 0; width: 100%; height: 100%; } the .videowrapper div should inside responsive element. padding on .videowrapper necessary keep video collapsing. may have tweak numbers depending upon layout.
Read more

wpf - PdfWriter.GetInstance throws System.NullReferenceException -

i'm trying create pdf document using itextsharp 5.3.4 using following document document = new document(); filestream stm = new filestream(filename, filemode.create); pdfwriter writer = pdfwriter.getinstance(document, stm); i'm getting system.nullreferenceexception following stack trace: system.nullreferenceexception occurred hresult=-2147467261 message=la référence d'objet n'est pas définie à une instance d'un objet. source=itextsharp stacktrace: à itextsharp.text.version.getinstance() innerexception: i've verified neither document nor stm null, , if select "continue" in vs12 document created - exception thrown. updated itextsharp 5.4.0 , it's still occurring. can't find information on anywhere - got ideas? make sure not catching exceptions. nullreferenceexception can 1 caught , handled inside itextsharp, don't care it. fact can continue supports theory. change following setting verify: debug -> exceptions ...
Read more