Question

This page lists a number of security issues to be aware of when redirecting a user off your primary website.

How can I hook into the ASP.NET MVC “pipeline” to detect when a hyperlink is being created, and alter it so that it goes to a redirection page such as https://host.com/redirect.aspx?http://yourlink.com

Answer 1

There isn’t any easy way to directly modify all links created by your View code, so it really depends on how much work you’re willing to do.

Assuming your users have javascript enabled, the easiest way would probably be to use jQuery to scan your page for links and modify them as appropriate. That way, none of your other code has to change.

http://jquery-howto.blogspot.com/2009/06/find-select-all-external-links-with.html

Another approach would be to have a policy of always creating external links by invoking a specific extension method:

@Html.ExternalLink("Click here", "http://www.google.com")

This introduces more maintenance overhead, but at least it consolidates the redirect code itself to one place where you could easily change it if you need to at some point in the future.