On: How my school rejected an app made for students

[woah]

What was the "ASP.net view state parser"?

[joshschreuder → woah]

Blog post: http://theiostream.tumblr.com/post/73637206523/parsing-asp-n...

And accompanying source code: https://github.com/theiostream/viewstate

[glassx → joshschreuder]

It's been a while since I last had to parse ASP.NET pages, but AFAIK, the viewstate isn't meant to be parsed by clients, you just have to re-send it during postbacks. It's more like a cookie, or Rails' authenticity_token [1].

[1] http://stackoverflow.com/questions/941594/understand-rails-a...

EDIT: Oh, ok. Re-reading the article, he was parsing the ViewState because there was some data hidden in there (a serious flaw actually), instead of scraping the site normally! Clever!