Improving Web Application Security: Threats and - CGISecurity

638 Part V: Assessing Your Security●Do you perform role checks in code?If your method code calls ContextUtil.IsCallerInRole, check that these calls arepreceded with calls to ContextUtil.IsSecurityEnabled. If security is not enabled,IsCallerInRole always returns true. Check that your code returns a securityexception if security is not enabled.Do You Use Object Constructor Strings?Search your code for “ConstructionEnabled” to locate classes that use objectconstruction strings.[ConstructionEnabled(Default="")]public class YourServicedComponent : ServicedComponent, ISomeInterfaceIf you use object constructor strings, review the following questions:● Do you store sensitive data in constructor strings?If you store data such as connection strings, check that the data is encrypted priorto storage in the COM+ catalog. Your code should then decrypt the data when it ispassed to your component through the Construct method.●Do you provide default construction strings?Do not do this if the data is in any way sensitive.Do You Audit in the Middle TierYou should audit across the tiers of your distributed application. Check that yourservice components log operations and transactions. The original caller identity isavailable through the SecurityCallContext object. This is only available if the securitylevel for your application is configured for process and component-level checks byusing the following attribute:[assembly: ApplicationAccessControl(AccessChecksLevel=AccessChecksLevelOption.ApplicationComponent)]RemotingThis section identifies the key review points that you should consider when youreview code that uses .NET Remoting. For more information about the issues raisedin this section, see Chapter 13, “Building Secure Remoted Components.”● Do you pass objects as parameters?● Do you use custom authentication and principal objects?● How do you configure proxy credentials?