daohualiuxiang
/
AspNetCore.Docs
mirror of https://github.com/dotnet/AspNetCore.Docs.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Clean/input/ra (#18951) 

* Clean user input before using

* Clean user input before using

* Clean user input before using

* Clean user input before using

* Clean user input before using

* Clean user input before using

* Clean user input before using

* Clean user input before using

* Clean user input before using
pull/18979/head
Rick Anderson 2020-06-26 10:05:33 -10:00 committed by GitHub
parent d87c50609c
commit 318ec650c7
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
aspnetcore/performance/ObjectPool/ObjectPoolSample/BirthdayMiddleware.cs
View File

@ -1,7 +1,12 @@
using Microsoft.AspNetCore.Http;
using Microsoft.EntityFrameworkCore.Query.ResultOperators;
using Microsoft.Extensions.DependencyInjection;
using Microsoft.Extensions.ObjectPool;
using Microsoft.Extensions.Primitives;
using System;
using System.Text;
using System.Text.Encodings.Web;
using System.Text.RegularExpressions;
using System.Threading.Tasks;
namespace ObjectPoolSample
@ -36,11 +41,14 @@ namespace ObjectPoolSample
stringBuilder.Append("Hi ")
.Append(firstName).Append(" ").Append(lastName).Append(". ");
var encoder = context.RequestServices.GetRequiredService<HtmlEncoder>();
if (now.Day == dayOfMonth && now.Month == monthOfYear)
{
stringBuilder.Append("Happy birthday!!!");
await context.Response.WriteAsync(stringBuilder.ToString());
var html = encoder.Encode(stringBuilder.ToString());
await context.Response.WriteAsync(html);
}
else
{
@ -54,7 +62,8 @@ namespace ObjectPoolSample
stringBuilder.Append("There are ")
.Append(daysUntilBirthday).Append(" days until your birthday!");
await context.Response.WriteAsync(stringBuilder.ToString());
var html = encoder.Encode(stringBuilder.ToString());
await context.Response.WriteAsync(html);
}
}
finally // Ensure this runs even if the main code throws.

2
aspnetcore/performance/ObjectPool/ObjectPoolSample/Startup.cs
View File

@ -20,6 +20,8 @@ namespace ObjectPoolSample
var policy = new StringBuilderPooledObjectPolicy();
return provider.Create(policy);
});
services.AddWebEncoders();
}
public void Configure(IApplicationBuilder app, IHostingEnvironment env)