Hemi JavaScript Framework

Hemi.web.security

• Hemi JavaScript Framework
• API Index

Description

Utilities for exploit mitigation.

static Hemi.web.security

version

A utility class for providing client support for exploit mitigation (requires corresponding server-side support).

Index

Property Index

• public PageTickets: Array of tickets included with the Web page. Tickets should be included for server-side requests requiring the presence of a ticket.

Method Index

• public AddPageTicket: Adds a new page ticket to the PageTickets array. Used to reduce CSRF exploit potential. A page ticket is a guid stored with the session, optionally for a specific server resource, and which may be required to complete an action. Refer to the Hemi/Components/component.session.xml component, Account Manager 4 project, and Core Web project for a reference implementation.
• public GetSession: Returns any session object added to the registry. Hemi includes the Session component for use with Account Manager 4. This can easily be updated to fit any desired server configuration.
• public IsAuthenticated: Uses the Session Component to determine whether the current session has been authenticated.

Properties

PageTickets

• Top
• security
• Properties

Array of tickets included with the Web page. Tickets should be included for server-side requests requiring the presence of a ticket.

Syntax

array = Hemi.web.security.PageTickets

Methods

AddPageTicket

• Top
• security
• Methods

Adds a new page ticket to the PageTickets array. Used to reduce CSRF exploit potential. A page ticket is a guid stored with the session, optionally for a specific server resource, and which may be required to complete an action. Refer to the Hemi/Components/component.session.xml component, Account Manager 4 project, and Core Web project for a reference implementation.

Syntax

void AddPageTicket( sId, sUri )

Parameters

• sId as String : Ticket identifier.
• sUri as String (optional): URL used to restrict the use of the ticket.

GetSession

• Top
• security
• Methods

Returns any session object added to the registry. Hemi includes the Session component for use with Account Manager 4. This can easily be updated to fit any desired server configuration.

Syntax

oSession = GetSession( )

Returns

oSession as object: Returns the session object from the registry.

IsAuthenticated

• Top
• security
• Methods

Uses the Session Component to determine whether the current session has been authenticated.

Syntax

bAuth = IsAuthenticated( )

Returns

bAuth as boolean: Returns a bit indicating whether the session includes an authentication bit.

[ Hemi JavaScript Framework - Stephen W. Cote, 2002 - 2009. ]