Hacker News new | ask | show | jobs
by joshschreuder 4393 days ago
Blog post: http://theiostream.tumblr.com/post/73637206523/parsing-asp-n...

And accompanying source code: https://github.com/theiostream/viewstate
1 comments
glassx 4393 days ago
It's been a while since I last had to parse ASP.NET pages, but AFAIK, the viewstate isn't meant to be parsed by clients, you just have to re-send it during postbacks. It's more like a cookie, or Rails' authenticity_token [1].

[1] http://stackoverflow.com/questions/941594/understand-rails-a...

EDIT: Oh, ok. Re-reading the article, he was parsing the ViewState because there was some data hidden in there (a serious flaw actually), instead of scraping the site normally! Clever!

link