DropDownList + ViewState (Validation requirement)

Discussion in 'ASP .Net Security' started by itaitai2003@yahoo.com, Mar 9, 2005.

  1. Guest

    >From a security perspective: Is it required to programmatically check
    if a DropDownList Postback 'SelectedValue' actually exists in the
    selection list previously rendered to the client? In other words: upon
    postback, when the DropDownList control Change event fires and the
    'old' ViewState is compared with the 'new' selection (the
    posted value) will the runtime throw an exception if the new value is
    not defined in the DropDownList loaded ViewState?

    Thanks

    -Itai
     
    , Mar 9, 2005
    #1
    1. Advertisements

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Ben Rush
    Replies:
    2
    Views:
    798
    Ben Rush
    Dec 5, 2003
  2. Steph
    Replies:
    2
    Views:
    1,904
    heislord5
    May 11, 2011
  3. ujjc001
    Replies:
    0
    Views:
    1,575
    ujjc001
    Jul 27, 2005
  4. Lucky Star

    Lead Validation Consultant Requirement

    Lucky Star, May 15, 2006, in forum: ASP .Net
    Replies:
    0
    Views:
    447
    Lucky Star
    May 15, 2006
  5. sck10
    Replies:
    6
    Views:
    1,270
    sck10
    Sep 1, 2006
  6. mark

    Viewstate errors... how do I get viewstate working?

    mark, Feb 20, 2004, in forum: ASP .Net Building Controls
    Replies:
    0
    Views:
    451
  7. Girish
    Replies:
    0
    Views:
    186
    Girish
    Jan 22, 2004
  8. Lucky Star

    Lead validation Consultant Requirement

    Lucky Star, May 15, 2006, in forum: Javascript
    Replies:
    0
    Views:
    209
    Lucky Star
    May 15, 2006
Loading...