Preventing mass assignment or over posting with Razor Pages in ASP.NET Core

added by DotNetKicks
4/28/2020 10:29:18 AM

260 Views

Mass assignment, also known as over-posting, is an attack used on websites that use model-binding. It is used to set values on the server that a developer did not expect to be set. This is a well known attack now, and has been discussed many times before, (it was a famous attack used against GitHub some years ago).


0 comments