how to Encrypt or Secure URL in MVC

Kalyani Shevale

7y8.4kLearn iOS Programming

I want My URL to encrypt in MVC.

please help me.

4 Replies

Know the answer? Post it — somebody with the same question will find it here.

Arun Kumar Tiwari7y ago
Hi Kalyani,

There is a lot of points to secure the URL in MVC application.

1) Security Misconfiguration (Error Handling Must Setup Custom Error Page)

2) Cross-Site Request Forgery (CSRF)

3) Cross-Site Scripting (XSS) attacks

4) Malicious File Upload.

5) Version Discloser

6) SQL Injection Attack.

7) Sensitive Data Exposure

8) Audit trail

9) Broken authentication and session management

10) Unvalidated Redirects and Forwards
0
Salman Beg7y ago
Hi.
In place of encrypting the whole url is a very bad idea. In place of that you can encrypt part of the url. You can follow these links for reference,

https://stackoverflow.com/questions/895586/encrypting-an-id-in-an-url-in-asp-net-mvc

https://stackoverflow.com/questions/4464722/how-do-i-encrypt-urls-in-asp-net-mvc

https://www.c-sharpcorner.com/forums/encrypt-a-url-in-mvc

Thanks.
0
Kalyani Shevale7y ago
@Arun

How to Secure URL in MVC ??
0
Arun Kumar Tiwari7y ago
Hi Kalyani,

As per our observation, There is no need to encrypt URL.
Encryption of URL it's not a good idea. It is already secured you could encrypt/decrypt URL parameters instead of Complete URL.

If you want a user to only access certain URLs if they're authorized, then you should use the [Authorize] attributes available in ASP.NET MVC.

if you want to encrypt/decrypt URL parameters (which isn't a bad idea at all), then check out Mads Kristensen's article "HttpModule for query string encryption".

check it.
https://www.codeproject.com/questions/1036066/how-to-hide-url-parameter-asp-net-mvc
0