Improving Web Application Security: Threats and - CGISecurity

806 Improving Web Application Security: Threats and CountermeasuresISecurityEncodableFromXmlToXmlIPermissionCopyDemandIntersectIsSubsetOfUnionIStackWalkAssertDemandDenyPermitOnlyCodeAccessPermissionDemandAssertDenyPermitOnlyIUnrestrictedPermissionIsUnrestrictedEncryptionPermissionCopyUnionIntersectIsSubsetOfIsUnrestrictedFromXmlToXmlFigure 8Custom EncryptionPermission inheritance hierarchyThe custom EncryptionPermission class maintains the following states:●●EncryptionPermissionFlag. Determines whether code that is granted thispermission is able to encrypt data, decrypt data, or both.StorePermissionFlag. Determines whether code that is granted this permission isable to use DPAPI with the machine store, current user store, or both.Summary of StepsThis How To includes the following steps:Step 1. Create the EncryptionPermission class.Step 2. Create the EncryptionPermissionAttribute class.Step 3. Install the Permission assembly in the global assembly cache (GAC).Step 4. Update the DPAPI managed wrapper code.Step 5. Call DPAPI from a medium trust Web application.