Encrypt address bar url in Asp.net

Question

Since this very important for every secure website to encrypt or encode its address bar URL to prevent end user from being viewing. How can I achieve this in asp.net at client side (by javascript). It should be display encoded URL but should work fine at server side. Means should decode appropriately. There are three questions you can provide answer for

Encode or decode URL by javascript.
Hide address bar
Prevent copying of address bar

Please share your views/Answer for any one of above as per your specification. It will helpful.

Thanks

Can you explain why the url needs to be secured? Sure the traffic should be secured using https / ssl but I can't think of any good reason you'd want to encrypt the address bar itself. — PeterJ, Dec 28 '12 at 05:57
Pretty sure this is a duplicate: http://stackoverflow.com/questions/332872/how-to-encode-a-url-in-javascript — Ross Brasseaux, Dec 28 '12 at 06:10
I Checked this. But can not found how to implement where I navigate by Response.Redirect() in asp.net — Rajaram Shelar, Dec 28 '12 at 06:14

score 0 · Answer 1 · answered Dec 28 '12 at 08:33

You can use encodeURIComponent(str) and encodeURI(str) functions for encoding URLs in java-script but I am not sure what purpose it would serve because URLs are still be valid and can be used by user. Some parts of it may get obfuscated as far as ordinary user is concerned but for any sophisticated user (who I guess would be your target for encoding scheme) could easily figure it out.
While launching the browser window (popup) from java-script, you can show it without address bar. For example,

var popup = window.open("http://someurl", "myPopup", 'toolbar=0,scrollbars=0,location=0,statusbar=0,menubar=0,resizable=0,width=120,height=120') But then its quite possible to have a browser that would allow to get the address bar back on some hot key or menu. Browser is the user agent and hence as such needs to allow user to control its UI rather than the content developer.
AFAIK, you cannot prevent user copying the address bar text. Hiding or preventing address bar copying is anyway pointless as one can easily figure out address by checking page properties or say sniffing network etc.

All said, I simply don't understand the idea behind what you want to do because it does not seems to server any purpose as far as security goes.

Encrypt address bar url in Asp.net

1 Answers1