Security Analysis and Architecture of a Blazor-Based Web Application

As technology advances, the ingenuity of security attacks and vulnerability exploits increases. These attacks target mainly web applications and strive to access and obtain user information for malicious use. A secure user login and registration interface was used to protect these data. This paper presents the architecture and security analysis of a web application developed using Blazor, a front-end framework created by Microsoft, and RabbitMQ, CloudAMQP’s message-queueing software. The paper analyzes the security architecture of a Blazor-based web application, and evaluates vulnerability to common threats, such as Structured Query Language Injection and Cross-Site Scripting, by performing static code analysis and threat modeling, using industry-standard tools. The analysis uncovered critical vulnerabilities, including Personally Identifiable Information (PII) Disclosure, and Blazor’s built-in mitigations for SQL Injection enhance its security posture. In conclusion, the PII Disclosure invalidates user privacy. This research has shown insight into the critical vulnerabilities of modern applications and helps researchers develop stronger security policies.