PHPIDS » Web Application Security 2.0

.NETIDS v.0.1.3.0 is now available and features several large changes to implementing the SecurePage class.

• Version set correctly on assembly (thanks to Albert)
• Moved scanning by SecurePage into Page_Init (thanks to Albert)
• Added new properties to SecurePage that include PostExclusions, GetExclusions, HeaderExclusions and CookieExclusions so that you can choose to exclude say “host” only from headers you can use HeaderExclusions. Of course you can still exclude from all scanners by using Exclusions.
• The event handler is no longer an abstract field meaning that you must change your declaration of public override void IDSEventHandler(Report report, SecurePage SecurePage) so that it does NOT override the base method (as this no longer exists). Instead you must declare public void IDSEventHandler(Report report, SecurePage SecurePage) and then wire this up to the event handler of the SecurePage object in Page_Init: OnIDSEvent += IDSEventHandler; This change is handy because it means that you can easily centralize IDS detection by specifying the same method for each handler rather than having hard to maintain, code duplicating methods in each page.
• ViewStateUserKey is no longer set by SecurePage. The same goes for caching values.
• Changed style of error output to conform to throw rather than re-writing page.
• Updated filter rules.

The latest binary is available at http://dotnetids.googlecode.com/files/dotnetids-bin-0_1_3_0.zip

If you have any suggestions for future improvements to .NETIDS please contribute to our own forum area here on php-ids.org.

This entry was posted on Thursday, August 2nd, 2007 at 8:00 pm and is filed under .NETIDS. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.