3. scot@scothillier.net @ScotHillier

4. Web Parts Workflows Pages Libraries App Parts SharePoint-Hosted Apps Provider-Hosted Apps

10. public IEnumerable Get() {} public string Get(int id) {} public void Post([FromBody]string value){} public void Put(int id, [FromBody]string value){} public void Delete(int id){} public class ValuesController : ApiController

11. config.Routes.MapHttpRoute( name: "DefaultApi", routeTemplate: "api/{controller}/{id}", defaults: new { id = RouteParameter.Optional } );

12. public IQueryable Get() { var d = new List () {"a", "b" }; return d.AsQueryable(); } public HttpResponseMessage Get(int id) { return Request.CreateResponse (HttpStatusCode.OK, data[id - 1]); }

18. <NavigationProperty Name="RootWeb" …

20. public class ContactsController : ODataController

21. ODataConventionModelBuilder builder = new ODataConventionModelBuilder(); builder.EntitySet ("Contacts"); builder.EntitySet ("Companies"); config.Routes.MapODataRoute("odata", "odata", builder.GetEdmModel());

26. Pre-flight request Request Headers Response Headers

27. Service not validating domains Page with malicious script Script gains access

41. Sponsored by