SecurityHelper Class

Contains methods for ensuring security

Inheritance Hierarchy

System.Object
  CMS.Helpers.SecurityHelper

Namespace: CMS.Helpers
Assembly: CMS.Helpers (in CMS.Helpers.dll) Version: 10.0.0

Syntax

public static class SecurityHelper

The SecurityHelper type exposes the following members.

Fields

	Name	Description
Public field Static member	EMAIL_CONFIRMATION_DATETIME_FORMAT	Date time format used in e-mail confirmation hashing methods.
Public field Static member	RegSquerBrackets	Regular expression for replacing square brackets from like expressions.
Public field Static member	SESSION_TOKEN_HEADER	HTTP header which can contain session token.

Properties

	Name	Description
Public property Static member	Pbkdf2IterationsCount	Iterations count used within Rfc2898DeriveBytes. More iterations will generate more resistant hashes to brute-force attacks, however performance issues might arise when set to high.

Methods

	Name	Description
Public method Static member	EnsureCertificateSecurity	If some module allows acceptation of untrusted or expired certificate, this method registers certificate validation callback.
Public method Static member	GenerateConfirmationEmailHash	Generates hash for confirmation email which approves certain action (subscription to forum, password change, ...).
Public method Static member	GetMD5Hash	Returns SHA2 hash for input data.
Public method Static member	GetPBKDF2Hash	Returns PBKDF2 hash for password. Rfc2898DeriveBytes implements PBKDF2 with HMACSHA1 (hard coded in the class).
Public method Static member	GetSecondsToShowScreenLockAction	Gets the time period when client should contact server to check ScreenLock state.
Public method Static member	GetSecurityAccessEnum	Gets the SecurityAccessEnum equivalent of the permission information from the given forum access encoded info.
Public method Static member	GetSHA1Hash	Returns the SHA1 hash byte array for given password string.
Public method Static member	GetSHA2Hash	Returns SHA2 hash for input data.
Public method Static member	HandleClickjacking	Adds protection against clickjacking - adding headers works only in integrated mode
Public method Static member	CheckPasswordPolicy(String, String)	Check password policy for specified password
Public method Static member	CheckPasswordPolicy(String, String, Int32, Int32, String)	Check password policy for specified password
Public method Static member	IsAutoCompleteEnabledForLogin	Returns whether Autocomplete is enabled for login usernames.
Public method Static member	IsScreenLockEnabled	Returns whether ScreenLock feature is enabled for given site.
Public method Static member	IsXFrameOptionsExcluded	Returns whether given path is excluded from adding X-Frame-Options HTTP header.
Public method Static member	LogScreenLockAction	Logs the call of this method as request for ScreenLock feature.
Public method Static member	SetSecurityAccessEnum	Gets the integer equivalent of the permission information specified by the SecurityAccessEnum.
Public method Static member	TryParseBasicAuthorizationHeader	Tries to parse Authorization header (Basic Authentication). Retrieves both username and password from header if parsing succeeded.
Public method Static member	ValidateCertificate	Returns true if current request should be excluded from checking Otherwise return real value
Public method Static member	ValidateConfirmationEmailHash	Returns whether hash for confirmation email is valid.
Public method Static member	ValidateSessionToken	Validates if session token is equal given token. In case that session doesn't contain token returns true.
Public method Static member	VerifyPBKDF2Hash	Returns true in case given password matches given PBKDF2 hash.