Tightening View State Belt

Looks like the SOBs who mount view state attacks read this blog too. Good. I want them to know I’m watching them and see their attempts to wise up.

I’ve tweaked my ViewStateSpamStopper module a little and will test it on those guinea pigs. No need to go to the whole error handling routine. Basically, if my code detects any tweaking of view state, it black lists the requester on the spot. I’ll share the code once it’s cooked well enough.

That said, if you start receiving 403’s (access denied) from my site, please let me know. In the meantime, make sure your <machineKey> is configured and sleep well.