Symantec Access Management

  • Private Community
Back to discussions
Expand all | Collapse all

Our application is using Request.Headers[HeaderIdentifier] rather than Request.ServerVariables[HeaderIdentifier] is this a security hole?

  • 1.  Our application is using Request.Headers[HeaderIdentifier] rather than Request.ServerVariables[HeaderIdentifier] is this a security hole?

    Posted Dec 18, 2018 08:36 PM

    Once we receive a response back from Siteminder with a custom header (we are using .Net) we then get the header information by doing Request.Headers[HeaderIdentifier] would doing this allow for a back door? Should we use Request.ServerVariables[HeaderIdentifier] does Siteminder write this custom header to Request.ServerVariables?