Hello, I have code in a asp.net application that runs along side other 3rd party code in the same application. I am inserting a custom object that has some information I want to keep private into the HttpContext object so that later in the pipeline some of my other code can retrieve it. Sessions, application, cookies are not an option here. There is the possibility that 3rd party code can run after I set this object and before my code runs again to read the data. What are some ways to prevent reading/tampering of this information? The solution I have so far is this:
Custom object has get and set methods like so
public object GetValue(string Password, string Key);
public void SetValue(string Password, string Key, object Value);
-The password is predetermined and is checked before allowing the method to continue.
-If my code tries to get this object from HttpContext.Items and is either NULL or getting ...
Go to the complete details ...