Book Image

ASP.NET MVC 4 Mobile App Development

By : Andy Meadows
Book Image

ASP.NET MVC 4 Mobile App Development

By: Andy Meadows

Overview of this book

The ASP.NET MVC 4 framework is used to build scalable web applications with the help of design patterns and .NET Framework. The Model-View-Controller (MVC) is a design principle which separates the components of a web application. This separation helps you to modify, develop, and test different components of a web application. ASP.NET MVC 4 Mobile App Development helps you to develop next generation applications, while guiding you to deal with the constraints the mobile web places on application development. By the end of the book, you will be well versed with all the aspects of mobile app development. ASP.NET MVC 4 Mobile App Development introduces you to developing mobile web apps using the ASP.NET MVC 4 framework. Walking you through the process of creating a homebrew recipe sharing application, this book teaches you the fundamentals and concepts relevant to developing Internet-ready mobile-enabled web apps. Through the sample application, you will learn how to secure your apps against XSS and CSRF attacks, open up your application to users using third party logins such as Google or Facebook, and how to use Razor, HTML 5, and CSS 3 to create custom views and content targeting mobile devices. Using these custom views, you will then learn how to create web apps with a native mobile device feel using jQuery mobile. By the end of the book, you will be presented with a set of challenges to prove to yourself that you now have the skills to extend your existing web applications to the mobile web or create new mobile web apps.
Table of Contents (23 chapters)
ASP.NET MVC 4 Mobile App Development
Credits
About the Author
Acknowledgment
About the Reviewers
www.PacktPub.com
Preface
7
Separating Functionality Using Routes and Areas
Index

Cross-Site Scripting (XSS)


Cross-Site Scripting is an attack that can occur when a user injects client-side script into a page in an attempt to gather information or infect the computers of other users. Specific things that can occur as a result of an XSS attack are the forcible download of viruses and bots, theft of cookies containing identifying information and/or login credentials of a user, or the ability to modify the content of a site.

XSS attacks usually occur when a user is allowed to submit HTML content to a site as part of a form submission.

Assume that we wanted to let users submit formatted HTML to our app in the GrainBill and Instruction fields of our recipe creation and editing views. Without careful implementation on our part, it would be possible for users to submit HTML content with embedded script that could be used to hijack a user's session.

Even if we only let trusted users submit HTML content, we would still be exposing ourselves because there's nothing preventing our...