_QS_FD_CONTENT_TYPE | |
_QS_FD_SESSION_KEY | NON-Localized String: This is a query string argument for the storage key for managing access to the session. The repost control looks for this query string argument, takes the string from it and looks in the user Session in the location marked by the value of _QS_FILEPATH_SESSION_KEY. Why do we do this? We cannot send the filepath in the QS because it could be spoofed by a malevolent user to download any file on the Web Server. We secure this download function by only making it possible to download filepaths placed on the session (which should not normally be directly accessible by users). If we wish to improve security later, we can apply a transformation on the filepath in the Session such that this control can only use filepaths explicitly transformed for use with this control (just in case the user finds some other place where a filepath is stored on the session). |
POSTTOSELF_ACTION_REDIRECT_AFTER_DOWNLOAD | This is posted after the popup window pops - so that the parent knows to redirect. |
STR_MVC_CLASS_NAME |
FileDownloadControl Constructor | Initializes a new instance of the FileDownloadControl class. |
CheckActionSecurityAndExecute | |
Create | |
Equals (inherited from Object) | Determines whether the specified Object is equal to the current Object. |
GetHashCode (inherited from Object) | Serves as a hash function for a particular type. GetHashCode is suitable for use in hashing algorithms and data structures like a hash table. |
GetName | |
GetType (inherited from Object) | Gets the Type of the current instance. |
Init | |
ToString (inherited from Object) | Returns a String that represents the current Object. |
Finalize (inherited from Object) | Allows an Object to attempt to free resources and perform other cleanup operations before the Object is reclaimed by garbage collection. |
MemberwiseClone (inherited from Object) | Creates a shallow copy of the current Object. |
FileDownloadControl Class | com.plumtree.uiinfrastructure.filedownload Namespace