Browse by Tags

Home › ASP.NET Weblogs

All Tags » Security » Software Design (RSS)

.NET Immutability Tip #3: Protect your properties AND your methods.

A common immutability practice is to simply protect the property setter with an immutability flag. Take a simple class that has a single integer field for to back our property and a single boolean flag to mark it immutable. using System; public class SimplyImmutable { private int field1 = 0; private...

Posted to Justin Rogers (Weblog) by Justin Rogers on 05-03-2004, 12:00 AM
Filed under: Security, Plug-In Framework, Quick Tips, Software Design
.NET Immutability Tip #2: Be careful of unprotected types in the executable.

I've seen this happen quite often. When developers create their immutable types, they assume the only view the user will ever have is of the type through some interface. Normally the interfaces are defined before-hand and included in some library that the user is supposed to link to. This can easily...

Posted to Justin Rogers (Weblog) by Justin Rogers on 04-10-2004, 12:00 AM
Filed under: Security, Plug-In Framework, Quick Tips, Software Design
Rob Rylea on autocompilation of XAML containing code within IE

Today you can't compile xaml on the fly. No xaml on the fly? Well that really sucks. Of course the points Rob makes are all basic points that apply under any code running circumstance. He points out how HTML + script creates possible badness, and how the running of HTML + script would be equivalent to...

Posted to Justin Rogers (Weblog) by Justin Rogers on 04-08-2004, 12:00 AM
Filed under: Security, Longhorn, Software Design
.NET Immutability Tip #1: Nothing is immutable.

I figured I'd start with the obvious. You can never control a machine 100%, so there is always the opportunity that whatever systems of protection you have in place, they can be overcome. This same principle applies to security and cheating systems as well. Things start to become mutable in .NET under...

Posted to Justin Rogers (Weblog) by Justin Rogers on 04-08-2004, 12:00 AM
Filed under: Security, CLR Internals, Plug-In Framework, Quick Tips, Software Design