Remark on CRIME/BREACH in route param and query string guidance

[guardrex]

Description

Here and in the Components overview, let's warn off of reproducing route param values and query string values in responses. Generally recommend that devs should avoid rendering components that contain sensitive information alongside components that can render data from untrusted sources (JS interop, database data provided by a user, route param, QS, etc.).

Page URL

https://learn.microsoft.com/en-us/aspnet/core/blazor/fundamentals/routing?view=aspnetcore-8.0

Content source URL

https://github.com/dotnet/AspNetCore.Docs/blob/main/aspnetcore/blazor/fundamentals/routing.md

Document ID

b6cb2574-6326-a40d-0b6c-d1661328e828

Article author

@guardrex