daohualiuxiang
/
AspNetCore.Docs
mirror of https://github.com/dotnet/AspNetCore.Docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add section on avoiding file capture (#33212)

pull/33196/head
Luke Latham 2024-07-31 08:33:21 -04:00 committed by GitHub
parent ded1200e76
commit 0bf146004c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 25 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
aspnetcore/blazor/fundamentals/routing.md
View File

@ -357,6 +357,7 @@ Constraint | Example | Example Matches | Invariant<br>culture<br>matching
`guid` | `{id:guid}` | `CD2C1638-1638-72D5-1638-DEADBEEF1638`, `{CD2C1638-1638-72D5-1638-DEADBEEF1638}` | No
`int` | `{id:int}` | `123456789`, `-123456789` | Yes
`long` | `{ticks:long}` | `123456789`, `-123456789` | Yes
`nonfile` | `{parameter:nonfile}` | Not `BlazorSample.styles.css`, not `favicon.ico` | Yes
> [!WARNING]
> Route constraints that verify the URL and are converted to a CLR type (such as `int` or <xref:System.DateTime>) always use the invariant culture. These constraints assume that the URL is non-localizable.
@ -389,6 +390,27 @@ Route constraints also work with [optional parameters](#route-parameters). In th
:::moniker-end
## Avoid file capture in a route parameter
The following route template inadvertently captures static asset paths in its optional route parameter (`Optional`). For example, the app's stylesheet (`.styles.css`) is captured, which breaks the app's styles:
```razor
@page "/{optional?}"
...
@code {
[Parameter]
public string? Optional { get; set; }
}
```
To restrict a route parameter to capturing non-file paths, use the [`:nonfile` constraint](#route-constraints) in the route template:
```razor
@page "/{optional:nonfile?}"
```
:::moniker range="< aspnetcore-8.0"
<!--

4
aspnetcore/blazor/fundamentals/static-files.md
View File

@ -526,13 +526,15 @@ Run the app.
:::moniker range=">= aspnetcore-8.0"
[App base path](xref:blazor/host-and-deploy/index#app-base-path)
* [App base path](xref:blazor/host-and-deploy/index#app-base-path)
* [Avoid file capture in a route parameter](xref:blazor/fundamentals/routing#avoid-file-capture-in-a-route-parameter)
:::moniker-end
:::moniker range="< aspnetcore-8.0"
* [App base path](xref:blazor/host-and-deploy/index#app-base-path)
* [Avoid file capture in a route parameter](xref:blazor/fundamentals/routing#avoid-file-capture-in-a-route-parameter)
* <xref:blazor/host-and-deploy/multiple-hosted-webassembly>
:::moniker-end