Загрузка страницы

Cross-Origin Requests (CORS) in ASP.NET Core | Getting Started With ASP.NET Core Series

Hello friends, Browser security prevents a web page from making requests to a different domain than the one that served the web page. This restriction is called the same-origin policy. The same-origin policy prevents a malicious site from reading sensitive data from another site.

Sometimes, you might want to allow other sites to make cross-origin requests to your application. This is usually when you have an API hosted independently and your different web applications talking to the API. In such scenarios, we need to enable CORS support on the API, so that the web application can call it.

In this video, let's learn about CORS, how it works, how to enable it in ASP NET API. I will show to how to simulate a CORS error in ASP NET Single Page Application and then add the appropriate configuration to ease the browser policies using CORS.

CORS is not a security feature, It is a W3C standard to relax same-origin policy. However if configured incorrectly CORS can cause potential issues to your application. Make sure to be explicit about the origins that can interact with the API that you are building.

🔗Source Code - Source Code: https://rahulpnath.visualstudio.com/DefaultCollection/YouTube%20Samples/_git/cors
🔗Enable CORS in ASP NET Core - https://docs.microsoft.com/en-us/aspnet/core/security/cors?view=aspnetcore-3.1&WT.mc_id=AZ-MVP-5003875
🔗Migrate from ASP.NET Core 2.2 to 3.0 - https://docs.microsoft.com/en-us/aspnet/core/migration/22-to-30?view=aspnetcore-3.1&tabs=visual-studio#cors&WT.mc_id=AZ-MVP-5003875

Additional Watching
📹SINGLE PAGE APPLICATION (SPA) TEMPLATES in ASP.NET Core - https://youtu.be/mILRINbRiJM
📹DEPENDENCY INJECTION in ASP.NET Core - https://youtu.be/YR6HkvNBpX4
📹MIDDLEWARE in ASP.NET Core - https://youtu.be/5eifH7LEnGo
📹ASP NET Core Series - https://www.youtube.com/playlist?list=PL59L9XrzUa-nqfCHIKazYMFRKapPNI4sP

Come say hi! ✋
🌍 Blog - https://rahulpnath.com/
✉ Subscribe to my Newsletter - https://www.rahulpnath.com/subscribe
🐦Twitter - https://twitter.com/rahulpnath
📸Instagram - https://www.instagram.com/rahulpnath/

🎥 Recording Setup and Workflow - https://www.rahulpnath.com/blog/youtube_setup_and_workflow/
Video Edited by my wife, Parvathy 😍

Make sure to SUBSCRIBE to the channel. THANK YOU for helping me grow this channel !!

Видео Cross-Origin Requests (CORS) in ASP.NET Core | Getting Started With ASP.NET Core Series канала Rahul Nath
Показать
Комментарии отсутствуют
Введите заголовок:

Введите адрес ссылки:

Введите адрес видео с YouTube:

Зарегистрируйтесь или войдите с
Информация о видео
29 октября 2020 г. 12:06:46
00:20:48
Другие видео канала
ASP NET CORE SINGLE PAGE APPLICATION (SPA) Build/Release Pipeline | Azure DevOpsASP NET CORE SINGLE PAGE APPLICATION (SPA) Build/Release Pipeline | Azure DevOpsSame-origin policy: The core of web security @ OWASP WellingtonSame-origin policy: The core of web security @ OWASP WellingtonCONFidence 2014: Security Implications of the Cross-Origin Resource Sharing - Gergely RevayCONFidence 2014: Security Implications of the Cross-Origin Resource Sharing - Gergely RevayLAYERING in ASP.NET Core | Getting Started With ASP.NET Core Series | Dependency Inversion PrincipleLAYERING in ASP.NET Core | Getting Started With ASP.NET Core Series | Dependency Inversion PrincipleAppSec EU 2017 Exploiting CORS Misconfigurations For Bitcoins And Bounties by James KettleAppSec EU 2017 Exploiting CORS Misconfigurations For Bitcoins And Bounties by James KettlePULL REQUEST WORKFLOW in AZURE DEVOPS - Raising a PR, Reviewing and Setting up Branch PoliciesPULL REQUEST WORKFLOW in AZURE DEVOPS - Raising a PR, Reviewing and Setting up Branch Policies#HITB2017AMS D2T1 - Everybody Wants SOME: Advance Same Origin Method Execution - Ben Hayak#HITB2017AMS D2T1 - Everybody Wants SOME: Advance Same Origin Method Execution - Ben HayakASP.Net Core Interview Questions and Answer || Top 15 .Net Core Interview QuestionsASP.Net Core Interview Questions and Answer || Top 15 .Net Core Interview QuestionsOPTIONS PATTERN in ASP.NET Core | Getting Started With ASP.NET Core SeriesOPTIONS PATTERN in ASP.NET Core | Getting Started With ASP.NET Core SeriesWeb Security - Lecture 04 - Cross-Site Request Forgery, Same Origin PolicyWeb Security - Lecture 04 - Cross-Site Request Forgery, Same Origin PolicyJames Kettle - Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSecUSA 2016James Kettle - Exploiting CORS Misconfigurations for Bitcoins and Bounties - AppSecUSA 2016Enable CORS (Cross Origin Requests) in .NET Core for AngularEnable CORS (Cross Origin Requests) in .NET Core for AngularUsing ARM TEMPLATES In AZURE DEVOPS PIPELINE To Automatically CREATE INFRASTRUCTURE As CODEUsing ARM TEMPLATES In AZURE DEVOPS PIPELINE To Automatically CREATE INFRASTRUCTURE As CODESame Origin Method Execution (SOME) - Exploiting a Callback for Same Origin Policy BypassSame Origin Method Execution (SOME) - Exploiting a Callback for Same Origin Policy BypassClean Architecture with ASP.NET Core 2.1 | Jason TaylorClean Architecture with ASP.NET Core 2.1 | Jason TaylorWeb Security - Lecture 05 - Exceptions to the Same Origin PolicyWeb Security - Lecture 05 - Exceptions to the Same Origin PolicyYAML RELEASES In AZURE DEVOPS PIPELINE | Configure Build and Release in YML fileYAML RELEASES In AZURE DEVOPS PIPELINE | Configure Build and Release in YML fileMIDDLEWARE in ASP.NET Core | Getting Started With ASP.NET Core SeriesMIDDLEWARE in ASP.NET Core | Getting Started With ASP.NET Core SeriesBuilding Microservices with Go: 9 CORS (Cross-Origin Resource Sharing)Building Microservices with Go: 9 CORS (Cross-Origin Resource Sharing)Enabling CORS & Token Authentication in an ASP.NET WEB API applicationEnabling CORS & Token Authentication in an ASP.NET WEB API application
Яндекс.Метрика