直接插入 - An Insecure JSON Data Transference from C# Server Page to Smart Devices Case Share

最新推荐文章于 2026-06-14 14:16:43 发布

原创最新推荐文章于 2026-06-14 14:16:43 发布 · 375 阅读

0 ·

本内容遵循CC 4.0 BY-SA版权协议

标签

#json #server #c# #database #android

#ios

收录于

在项目中遇到使用C#页面读取数据库并处理Android和iOS设备的数据请求时，采用JSON作为数据传输方式。然而教授认为此方案存在安全隐患。文章探讨了如何在保持代码复用的同时，确保数据安全。

What is JSON, click her

I'm working on a project with JSON.

Project Description

The page that reads database has existed already. The page is coded with C#. I need to reuse the page to the largest extent, and accommodate the data inquiries from smart devices with Android and iOS systems.

Solution

直接插入 the following line

SerResults jsonValidResult = new SerResults(true);
System.Runtime.Serialization.Json.DataContractJsonSerializer serial = new System.Runtime.Serialization.Json.DataContractJsonSerializer(jsonValidResult.GetType());
serial.WriteObject(Response.OutputStream, jsonValidResult);
Response.OutputStream.Close();

Result

Professor was pretty upset , because he believed this was an insecure solution. What should I do????