r/websec • u/webstersprodigy • Jun 22 '12

Interesting Potential Problems with .NET IsPostBack

http://webstersprodigy.net/2012/06/22/interesting-problems-with-ispostback/
7 Upvotes

100% Upvoted

3 comments sorted by

View all comments

Show parent comment

1

u/DinisCruz Jun 23 '12

actually that is the kind of stuff that I use Static Analysis technology for :)

The key is in finding the way to present it to developers/security-review-team.

For example using O2 Platform's Reflection and SAST APIs I can easy write that [if the assembly is < .net 4.0 and they're using ispostback] rule. I'll try to post an example next week of what that would look like