Need to find where URL's are constructed in various C#.NET solutions

Need to find where query params are added to a .NET Solution.

I need to search through multiple solutions and find the many places where query string params are added to the URL. So, I wonder about all the ways this can be done.

Have you got any searches I can do that would help me track those down?

My fear is that finding them all would be nearly impossible, given you can insert a query parameter just be concatenating a string.

But, please make suggestions about explicit commands and objects used, and other more general keywords I can search for, to discover where URL's are being created.

Thanks
newbiewebSr. Software EngineerAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Ares KurkluSoftware EngineerCommented:
Depending on how the query is formed it should have either a reference to domain name variable or domain name itself, you can also look for "&" or "?"
If you want to use an external tool and not VS to search you can use the following:
http://www.funduc.com/srshareware.htm
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
newbiewebSr. Software EngineerAuthor Commented:
Can you think of any character string more unique than & and ?

I imagine that would match every file in the project.

I assume things like:
Uri
Url
http
https

would be a good start.

How about?
ReturnURL
goto

Can you suggest some others?

Thanks
0
Ares KurkluSoftware EngineerCommented:
Depends on how they are in the code they may have http or there may be just a variable.
 
What is the purpose of finding them?
0
Cloud Class® Course: CompTIA Healthcare IT Tech

This course will help prep you to earn the CompTIA Healthcare IT Technician certification showing that you have the knowledge and skills needed to succeed in installing, managing, and troubleshooting IT systems in medical and clinical settings.

David Johnson, CD, MVPOwnerCommented:
It will be almost impossible since it is simply a string. So any string manipulation commands are potential targets.
0
newbiewebSr. Software EngineerAuthor Commented:
I need to find all query string parameters so I can create a white-list for the purpose of blocking malicious attacks.
0
newbiewebSr. Software EngineerAuthor Commented:
thanks
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
ASP.NET

From novice to tech pro — start learning today.