Skip to content

Commit 1fb5518

Browse files
authored
Updates to compression warning content (dotnet#32167)
1 parent aa55d48 commit 1fb5518

File tree

2 files changed

+7
-2
lines changed

2 files changed

+7
-2
lines changed
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
:::moniker range=">= aspnetcore-9.0"
22

3-
> [!WARNING>]
3+
> [!WARNING]
44
> With compression, which is enabled by default, avoid creating secure (authenticated/authorized) interactive server-side components that render data from untrusted sources. Untrusted sources include route parameters, query strings, data from JS interop, and any other source of data that a third-party user can control (databases, external services). For more information, see <xref:blazor/fundamentals/signalr#websocket-compression-for-interactive-server-components> and <xref:blazor/security/server/interactive-server-side-rendering?view=aspnetcore-9.0#interactive-server-components-with-websocket-compression-enabled>.
55
66
:::moniker-end

aspnetcore/blazor/javascript-interoperability/index.md

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,9 +32,14 @@ Further JS interop guidance is provided in the following articles:
3232

3333
## Compression for interactive server components with untrusted data
3434

35+
<!-- Doc author note: This content is also in an INCLUDE file at
36+
blazor/includes/compression-with-untrusted-data.md because the
37+
text is used in a warning format in two articles. -->
38+
39+
With compression, which is enabled by default, avoid creating secure (authenticated/authorized) interactive server-side components that render data from untrusted sources. Untrusted sources include route parameters, query strings, data from JS interop, and any other source of data that a third-party user can control (databases, external services). For more information, see <xref:blazor/fundamentals/signalr#websocket-compression-for-interactive-server-components> and <xref:blazor/security/server/interactive-server-side-rendering?view=aspnetcore-9.0#interactive-server-components-with-websocket-compression-enabled>.
40+
3541
:::moniker-end
3642

37-
[!INCLUDE[](~/blazor/includes/compression-with-untrusted-data.md)]
3843

3944
## JavaScript interop abstractions and features package
4045

0 commit comments

Comments
 (0)