ER656919 likes this.
  • Justin Yao (Veracode, Inc.)

    Great question, you can use a viewmodels approach, which can be thought of as a subset of attributes from your model. The viewmodel in this case would only contain the attributes that you allow to POST against. This will prevent an overpost attack in a similar way that a Bind Include Annotation would in MVC.

Topics (4)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.