<dd id="sga4y"><optgroup id="sga4y"></optgroup></dd>
<nav id="sga4y"><code id="sga4y"></code></nav>
  • <optgroup id="sga4y"></optgroup>

    ASP.NET Bad Practices: Unminified Code

    ABSTRACT

    此文件中包含未壓縮的 JavaScript。出于性能方面的考慮,Microsoft 建議為包含 JavaScript 庫的壓縮版本。

    EXPLANATION

    壓縮版本的庫通過減少文件大小,改善了包含 JavaScript 文件的應用程序的頁面加載時間。壓縮指刪除不必要的空白、注釋、分號、括號、縮短本地變量的名稱以及刪除無法訪問的代碼的過程。

    例 1:下列 ASPX 代碼包含 Microsoft jQuery 庫的未壓縮版本:


    ...
    <script src="http://applicationserver.application.com/lib/jquery/jquery-1.4.2.js" type="text/javascript"></script>
    ...

    REFERENCES

    [1] Standards Mapping - OWASP Top 10 2010 - (OWASP 2010) A1 Injection

    [2] Standards Mapping - OWASP Top 10 2004 - (OWASP 2004) A1 Unvalidated Input

    [3] Standards Mapping - OWASP Top 10 2007 - (OWASP 2007) A3 Malicious File Execution

    [4] Standards Mapping - Security Technical Implementation Guide Version 3 - (STIG 3) APP3510 CAT I, APP3600 CAT II

    [5] Standards Mapping - Security Technical Implementation Guide Version 3.4 - (STIG 3.4) APP3510 CAT I, APP3600 CAT II

    [6] Standards Mapping - Common Weakness Enumeration - (CWE) CWE ID 94

    [7] Introduction to CSS Minification Microsoft

    [8] Microsoft AJAX Minifier Microsoft

    [9] Optimizations for Improving Load Times Microsoft

    [10] Standards Mapping - SANS Top 25 2009 - (SANS 2009) Risky Resource Management - CWE ID 094

    [11] Standards Mapping - SANS Top 25 2010 - (SANS 2010) Risky Resource Management - CWE ID 098

    [12] Standards Mapping - FIPS200 - (FISMA) SI


    Copyright 2013 Fortify Software - All rights reserved.
    (Generated from version 2013.1.1.0008 of the Fortify Secure Coding Rulepacks)
    desc.semantic.dotnet.asp_net_bad_practices_unminified_code

    97av