how to Encrypt or Secure URL in MVC

Question

I want My URL to encrypt in MVC. please help me.

Arun Kumar Tiwari · Answer

Hi Kalyani, There is a lot of points to secure the URL in MVC application. 1) Security Misconfiguration (Error Handling Must Setup Custom Error Page) 2) Cross-Site Request Forgery (CSRF) 3) Cross-Site Scripting (XSS) attacks 4) Malicious File Upload. 5) Version Discloser 6) SQL Injection Attack. 7) Sensitive Data Exposure 8) Audit trail 9) Broken authentication and session management 10) Unvalidated Redirects and Forwards

Salman Beg · Answer

Hi. In place of encrypting the whole url is a very bad idea. In place of that you can encrypt part of the url. You can follow these links for reference, https://stackoverflow.com/questions/895586/encrypting-an-id-in-an-url-in-asp-net-mvc https://stackoverflow.com/questions/4464722/how-do-i-encrypt-urls-in-asp-net-mvc https://www.c-sharpcorner.com/forums/encrypt-a-url-in-mvc Thanks.

Kalyani Shevale · Answer

@Arun How to Secure URL in MVC ??

Arun Kumar Tiwari · Answer

Hi Kalyani, As per our observation, There is no need to encrypt URL. Encryption of URL it's not a good idea. It is already secured you could encrypt/decrypt URL parameters instead of Complete URL. If you want a user to only access certain URLs if they're authorized, then you should use the [Authorize] attributes available in ASP.NET MVC. if you want to encrypt/decrypt URL parameters (which isn't a bad idea at all), then check out Mads Kristensen's article "HttpModule for query string encryption". check it. https://www.codeproject.com/questions/1036066/how-to-hide-url-parameter-asp-net-mvc

how to Encrypt or Secure URL in MVC

Answers (4)