Andrii Kurdiumov kant2002

I have very specific view that ASP.NET Core security is probably fine, but overall industry guidelines are meh and tailored for security people. Almost all issues which I have with implementing security was due to other external factors, like:

lack of resources
Lack of training in securing solution
Lack of time to find proper solution
Lots of jargonism and abstractiosn in describing security.

My observvations applied to cases where solo-developer or team of developers responsible for implementing security for their "product". That can be devs in small, mid sized org, or teams in large orgs where security department demands some techniquest to be employed. Or even better goverment agencies which everywhere in the world underfunded and do not have enough resources for securing things.

	# one time
	./build.sh

	# when make changes to compiler
	dotnet build src/fsharp/fsc/fsc.fsproj

	# Compile test application
	artifacts/bin/fsc/Debug/net5.0/fsc ../test.fs --targetprofile:netcore --target:exe --out:test.exe
	dotnet test.exe

	void EnrichRequest(Request request)
	{
	var days = configurationService.GetValidDurationInDays();
	request.ValidTo = request.ValidTo ?? DateTime.Now.AddDays(days);
	}

	// Супер легко использовать
	EnrichRequest(request);

	/*

	namespace InternalNamespace.Nested;

	using Microsoft.Extensions.DependencyInjection;

	class DependentTestService {}

	class TestService
	{
	public TestService(DependentTestService dependency) {}
	}

	[LibraryImport(Libraries.UxTheme)]
	public static partial HRESULT DrawThemeEdge(
	IntPtr hTheme,
	Gdi32.HDC hdc,
	int iPartId,
	int iStateId,
	ref RECT pDestRect,
	User32.EDGE uEdge,
	User32.BF uFlags,
	ref RECT pContentRect);

	// See https://aka.ms/new-console-template for more information
	Console.WriteLine("Hello, World!");

	test x = new test();

	for(var i =0; i < 10; i++)
	{
	var thread = new Thread(Worker);
	thread.Start();
	}

	<Project Sdk="Microsoft.NET.Sdk">

	<PropertyGroup>
	<OutputType>Exe</OutputType>
	<TargetFramework>net6.0</TargetFramework>
	<ImplicitUsings>enable</ImplicitUsings>
	<Nullable>enable</Nullable>
	<AllowUnsafeBlocks>true</AllowUnsafeBlocks>
	</PropertyGroup>

	import x from "./module.mjs";
	import "./second.mjs";

	x.log();