.NET Blog
Free. Cross-platform. Open source. A developer platform for building all your apps.
Latest posts
September 2014 .NET Security Updates
The .NET team released a security bulletin and a security advisory today as part of the monthly “patch Tuesday” cycle. Microsoft Security Bulletin MS14-053 - Important, Vulnerabilities in .NET Framework Could Allow Denial of Service (2990931) This security update resolves one privately reported vulnerability in Microsoft .NET Framework. The vulnerability could allow denial of service if an attacker sends a small number of specially crafted requests to an affected .NET-enabled website. By default, ASP.NET is not installed when Microsoft .NET Framework is installed on any supported editi...
September 2014 .NET Security Updates
The .NET team released a security bulletin and a security advisory today as part of the monthly “patch Tuesday” cycle. Microsoft Security Bulletin MS14-053 - Important, Vulnerabilities in .NET Framework Could Allow Denial of Service (2990931) This security update resolves one privately reported vulnerability in Microsoft .NET Framework. The vulnerability could allow denial of service if an attacker sends a small number of specially crafted requests to an affected .NET-enabled website. By default, ASP.NET is not installed when Microsoft .NET Framework is installed on any supported editi...
September 2014 .NET Security Updates
The .NET team released a security bulletin and a security advisory today as part of the monthly “patch Tuesday” cycle. Microsoft Security Bulletin MS14-053 - Important, Vulnerabilities in .NET Framework Could Allow Denial of Service (2990931) This security update resolves one privately reported vulnerability in Microsoft .NET Framework. The vulnerability could allow denial of service if an attacker sends a small number of specially crafted requests to an affected .NET-enabled website. By default, ASP.NET is not installed when Microsoft .NET Framework is installed on any supported editi...
Farewell, EnableViewStateMac!
The ASP.NET team is making an important announcement regarding the September 2014 security updates. All versions of the ASP.NET runtime 1.1 - 4.5.2 now forbid setting <%@ Page EnableViewStateMac="false" %> and <pages enableViewStateMac="false" />. If you have set EnableViewStateMac="false" anywhere in your application, your application will be affected by this change and you should read on. Otherwise there is no action you must take, and the behavior of your application will not be affected. In December 2013, we released a security advisory warning that the configuration setting EnableViewStateMa...
September 2014 .NET Security Updates
The .NET team released a security bulletin and a security advisory today as part of the monthly “patch Tuesday” cycle. Microsoft Security Bulletin MS14-053 - Important, Vulnerabilities in .NET Framework Could Allow Denial of Service (2990931) This security update resolves one privately reported vulnerability in Microsoft .NET Framework. The vulnerability could allow denial of service if an attacker sends a small number of specially crafted requests to an affected .NET-enabled website. By default, ASP.NET is not installed when Microsoft .NET Framework is installed on any supported editi...
Using WCF in .NET Native
This post was authored by Ron Cain, a Software Development Engineer on the WCF team. In our previous post, we mentioned that some of the client components of Windows Communication Foundation (WCF) had been made available for .NET Native Windows Store apps in Visual Studio "14" CTP3. In this post, I will describe how to build a sample WCF Windows Store App using CTP3 and make it run using the .NET Native compiler. Note that most of this walk-through is not unique to .NET Native and applies equally well to a conventional Windows Store App. The final section of the walk- through describes the extra couple steps to...
Announcing the Release Candidates for Web API OData 5.3
The release candidate NuGet packages for ASP.NET Web API OData 5.3 are now live on the NuGet gallery!Download this releaseYou can install or update the release candidate NuGet packages for ASP.NET Web API OData 5.3 using the NuGet Package Manager Console, like this: What’s in this release?This release primarily includes great new features for Web API OData v4 as summarized below:ASP.NET Web API OData 5.3 Release Candidate Additional DocumentationTutorials and other information about Web API OData are available from the ASP.NET web site (http://www.asp.net/web-api/overview/odata-support-in-aspn...
Being an intern on the .NET Team
This summer we had six amazing interns that joined the team to work on .NET. Their projects ranged from internal tools, over shipping components to designing forward looking aspects: If you're interested in interning with Microsoft, visit our recruiting web site. Now let's dive right in and see what cool stuff they helped us building. Shaun Arora: Designing .NET for NuGet We're releasing more and more .NET framework functionality via NuGet. Moving forward, we intend to bring the two even closer together. Shaun spend a lot of time thinking about this problem space and helped us shape our thoughs and design...
Customizing Web API controller selector
In the last few weeks we have encountered a customer reports of performance issues with their Web API applications. When the 4th report exhibited the same phenomenon I figured it’s time to blog about it. Why would you customize a controller selector? (hint – try not to) It gives you a chance to control how the request gets routed. By default Web API uses the controller token from routing to select the controller. If you want a different behavior, such as selection based on an HTTP header, then you need to customize the controller selector. Wait. Not really. This was true for Web API 1.0. In Web API 2.0 a...