How to encrypt url in c# in networks tab when we run the application

Question

When we run the application, click on f12, we will get networks tab and all the url's will be displayed. I want to encrypt the value of parameters in the url.

Sachin Singh · Answer

Create a common method to encrypt url and then use this on every anchor tag and wherever you use url then on server side decrypt it. example public static class EncryptDecryptHelper { private const string AesIV256 = @ "sachinsinghsecretkey" ; private const string AesKey256 = @ "akilodkyebfjSecret" ; public static string Encrypt(string text) { // AesCryptoServiceProvider AesCryptoServiceProvider aes = new AesCryptoServiceProvider(); aes.BlockSize = 128; aes.KeySize = 256; aes.IV = Encoding.UTF8.GetBytes(AesIV256); aes.Key = Encoding.UTF8.GetBytes(AesKey256); aes.Mode = CipherMode.CBC; aes.Padding = PaddingMode.PKCS7; // Convert string to byte array byte[] src = Encoding.Unicode.GetBytes(text); // encryption using (ICryptoTransform encrypt = aes.CreateEncryptor()) { byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length); // Convert byte array to Base64 strings return Convert.ToBase64String(dest); } } /// /// AES decryption /// public static string Decrypt(string text) { // AesCryptoServiceProvider AesCryptoServiceProvider aes = new AesCryptoServiceProvider(); aes.BlockSize = 128; aes.KeySize = 256; aes.IV = Encoding.UTF8.GetBytes(AesIV256); aes.Key = Encoding.UTF8.GetBytes(AesKey256); aes.Mode = CipherMode.CBC; aes.Padding = PaddingMode.PKCS7; // Convert Base64 strings to byte array byte[] src = System.Convert.FromBase64String(text); // decryption using (ICryptoTransform decrypt = aes.CreateDecryptor()) { byte[] dest = decrypt.TransformFinalBlock(src, 0, src.Length); return Encoding.Unicode.GetString(dest); } } public static string EncryptUrl(string text) { if (!string.IsNullOrWhiteSpace(text)) { // AesCryptoServiceProvider AesCryptoServiceProvider aes = new AesCryptoServiceProvider(); aes.BlockSize = 128; aes.KeySize = 256; aes.IV = Encoding.UTF8.GetBytes(AesIV256); aes.Key = Encoding.UTF8.GetBytes(AesKey256); aes.Mode = CipherMode.CBC; aes.Padding = PaddingMode.PKCS7; // Convert string to byte array byte[] src = Encoding.Unicode.GetBytes(text); // encryption using (ICryptoTransform encrypt = aes.CreateEncryptor()) { byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length); // Convert byte array to Base64 strings return HttpUtility.UrlEncode(Convert.ToBase64String(dest)); } } return string.Empty; } public static string EncryptUrl( this object text) { if (!string.IsNullOrWhiteSpace(text.ToString())) { // AesCryptoServiceProvider AesCryptoServiceProvider aes = new AesCryptoServiceProvider(); aes.BlockSize = 128; aes.KeySize = 256; aes.IV = Encoding.UTF8.GetBytes(AesIV256); aes.Key = Encoding.UTF8.GetBytes(AesKey256); aes.Mode = CipherMode.CBC; aes.Padding = PaddingMode.PKCS7; // Convert string to byte array byte[] src = Encoding.Unicode.GetBytes(text.ToString()); // encryption using (ICryptoTransform encrypt = aes.CreateEncryptor()) { byte[] dest = encrypt.TransformFinalBlock(src, 0, src.Length); // Convert byte array to Base64 strings return HttpUtility.UrlEncode(Convert.ToBase64String(dest)); } } return string.Empty; } /// /// AES decryption /// public static string DecryptUrl(string text) { if (!string.IsNullOrWhiteSpace(text) && text!= "undefined" ) { // AesCryptoServiceProvider AesCryptoServiceProvider aes = new AesCryptoServiceProvider(); aes.BlockSize = 128; aes.KeySize = 256; aes.IV = Encoding.UTF8.GetBytes(AesIV256); aes.Key = Encoding.UTF8.GetBytes(AesKey256); aes.Mode = CipherMode.CBC; aes.Padding = PaddingMode.PKCS7; text = text.Replace( "%2b" , "+" ).Replace( "%2f" , "/" ).Replace( "%3d" , "=" ); // Convert Base64 strings to byte array byte[] src = System.Convert.FromBase64String(text); // decryption using (ICryptoTransform decrypt = aes.CreateDecryptor()) { byte[] dest = decrypt.TransformFinalBlock(src, 0, src.Length); return HttpUtility.UrlDecode(Encoding.Unicode.GetString(dest)); } } return string.Empty; } public static string EncodeBase64(string plainText) { var plainTextBytes = System.Text.Encoding.UTF8.GetBytes(plainText); return System.Convert.ToBase64String(plainTextBytes); } public static string DecodeBase64(string base64EncodedData) { try { var base64EncodedBytes = System.Convert.FromBase64String(base64EncodedData); return System.Text.Encoding.UTF8.GetString(base64EncodedBytes); } catch (Exception ex) { return string.Empty; } } #region SHA HASH public static string SHA512(string input) { var bytes = System.Text.Encoding.UTF8.GetBytes(input); using (var hash = System.Security.Cryptography.SHA512.Create()) { var hashedInputBytes = hash.ComputeHash(bytes); // Convert to text // StringBuilder Capacity is 128, because 512 bits / 8 bits in byte * 2 symbols for byte var hashedInputStringBuilder = new System.Text.StringBuilder(128); foreach (var b in hashedInputBytes) hashedInputStringBuilder.Append(b.ToString( "X2" )); return hashedInputStringBuilder.ToString(); } } #endregion } use the encryptUrl method on views and decryptUrl method on controller "/Controller/Action?id=@EncryptDecryptHelper.EncryptUrl(item.Id+ " _ " + SessionHelper.CurrentSession.Id)" > ID On the controller dycrypt it public ActionResult Action(string id) { if (id != null) { int Id = 0; long UserId = 0; var IncDocId = EncryptDecryptHelper.DecryptUrl(id); var ids = IncDocId.Split( '_' ); int .TryParse(ids[0], out Id); long .TryParse(ids[1], out UserId); if (SessionHelper.CurrentSession.Id == UserId) { // do something } } Note:- you don't need to think about sessonHelper that is my extra layer for security.

Sachin Singh · Answer

yes, easily, razor variable are available inside script @model yourModel @ using Common.EncryptDecryptHelper // your helper class // your view here // var url = { url1: '/Home/index/@EncryptDecryptUrl("params")' , } $.ajax({ type: 'GET' , url: url.url1, success: function(data) {} });

Anusha G · Answer

Can we do this in JQuery?