.NET Blog
Free. Cross-platform. Open source. A developer platform for building all your apps.
Featured posts
Aspire 9.4 is here with a CLI and interactive dashboard features
Aspire 9.4 is packed with new features, integrations, and improvements
Latest posts
Package Manifests
As we work on the designs for getting NuGet in the platform, it has become clear that NuGet needs better support for carrying arbitrary artifacts in packages and exposing them for consumption after the initial package installation. Conventional Manifests Since NuGet's initial release, it has supported conventional manifests and only a few concepts. All other files inside the package are completely ignored and NuGet's existing design makes it difficult to expand on these concepts or introduce new ones. Before we dive into where we think NuGet is going, let's look closer at what NuGet supports today wit...
Microsoft Asp.Net MVC Security Update MS14-059 broke my build!
Microsoft just released a new security update to be automatically applied to machines configured to use Microsoft Update. The security bulletin is available here: https://technet.microsoft.com/en-us/library/security/ms14-059Unfortunately, some ASP.NET MVC 3 and 4 VS projects can no longer build after the update is applied. These projects will fail with the following error: Could not locate the assembly "System.Web.Mvc,Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35,processorArchitecture=MSIL".This happens when your project references assemblies from the GAC or the Reference Assemblies...
Announcing new Web Features in Visual Studio 2013 Update 4 RC
Today, the Visual Studio team announced the release of Visual Studio 2013 Update 4 RC. Our team added a few useful features and did some bug fixing in this update to improve the web development experience. Microsoft ASP.NET and Web Tools 2013.4 RC JSON Editor Improvement We made a few improvements in the JSON editor, including performance improvements such as loading the JSON schema asynchronously, caching child schemas, improving IntelliSense, etc. We also have the following new features: JSON Schema validation We added a JSON schema validation feature, based on the schema selected in the drop-down li...
NuGet: In the Platform
I recently declared that NuGet is "Broken By Design." Now, that was hyperbolic; I don't really think NuGet is broken. In fact, I'm very pleased with NuGet (and proud of it). But I wanted to make the point that NuGet's approach both earned it success but also came at a cost. NuGet can't presently offer some expected package management features because it's merely a package management façade over top of existing Visual Studio and MSBuild capabilities. I also wanted you all to know that we recognize that NuGet has been stagnating and that we want to make some changes. The Right Approach? For years, many have ques...
October 2014 .NET Security Updates
The .NET team released a security bulletin today as part of the monthly “patch Tuesday” cycle. Microsoft Security Bulletin MS14-057 - Critical, Vulnerabilities in the .NET Framework could allow remote code execution (3000414) This security update resolves three privately reported vulnerabilities in Microsoft .NET Framework. The most severe of these vulnerabilities could allow remote code execution if an attacker sends a specially crafted URI request containing international characters to a .NET web application. The security update further resolves an Elevation of Privilege vulnerability in the...
Announcing Microsoft.ASPNET.Facebook 1.1 RTM
![Kirthi [MSFT]](https://devblogs.microsoft.com/dotnet/wp-content/uploads/sites/10/letter-avatar/75125dafedd2f3eac2baee379fe9e470.svg){kind=avatar}
The NuGet packages for Microsoft.ASPNET.Facebook 1.1 are now live on the NuGet gallery!Download this releaseYou can install or update the NuGet packages for Microsoft.ASPNET.Facebook 1.1 using the NuGet Package Manager Console, like this: What’s in this release?In this release, we enabled better support for the Safari browser and added a new feature that gives developers the ability to add custom logic for browsers that do not have cookies enabled. You can find detailed explanation for the new features here. The Visual Studio template that uses this updated package will be released soon. The Visual Studi...
_references.js file’s auto sync feature
In VS2013 RTM, we shipped a not well known feature for _references.js file: /// <autosync enabled="true" />. If we specify /// <autosync enabled="true" /> in the beginning of ~/scripts/_references.js, then any addition, rename, deletion of JavaScript files in the project will automatically change the content in this file. You can disable this feature by removing the line or put assign false to enabled attribute. For example, create a new MVC project, open scripts/_references.js file and you will see the following if you are using VS2013 with update 3. Drag and drop bootstrap....
NuGet : Broken By Design
On January 13, 2011, NuGet 1.0 was released with ASP.NET MVC 3. On June 19, 2012, NuGet 2.0 shipped in the box with all editions of Visual Studio 2012 (including the free ones). That was a little over 2 years ago, and NuGet's adoption has been steadily increasing since then. Here are some interesting figures for recent NuGet usage from nuget.org: The NuGet is team quite happy with the adoption we've seen. But at almost 4 years old, NuGet is starting to show its age and some even claim that "NuGet is broken." Reasons for Success Before we delve into the ways in which NuGet can be co...
Visual Studio Tooling Guidance
As NuGet continues to gain momentum, more Microsoft teams have been seeking to install NuGet packages from their Visual Studio tooling. This began with ASP.NET, where NuGet was born, when project templates started coming with pre-installed NuGet packages. More recently, we've heard of teams all across Microsoft with tooling gestures that result in NuGet packages being installed. We have some guidance we give these teams, but some have questioned our guidance. We're here to ask if you agree with us or if you think we should adapt to meet the expectations of these other teams. Installing Packages From nuget.org ...