CODEWITHSUNDEEP
asp.netasp.net-mvc
TPR
TPR

Reputation: 2577

ASP.NET MVC - Where is HttpContext.Current stored?

I'm storing a lot of sensitive information in it. Is it something that can be seen by end-user?

Upvotes: 1

Views: 844

Answers (2)

James Hull
James Hull

Reputation: 3689

No it cannot. It's fine to store sensitive information there. In fact - it's where .net membership creates the User object for authentication.

http://msdn.microsoft.com/en-us/library/ff650037.aspx

Upvotes: 2

Kemal Can Kara
Kemal Can Kara

Reputation: 416

Actually no. The session informations are in your server. Hidden html objects (including view state), cookies or your querystring can be seen by end - user

Upvotes: 1

Related Questions