Microsoft MVP and blogger, focused on ASP.NET Core. Author of ASP.NET Core in Action (https://mng.bz/5mRz)
Blog: https://andrewlock.net
Mastadon: @[email protected]
Twitter: @andrewlocknet

@andrewlock.bsky.social
Microsoft MVP and blogger, focused on ASP.NET Core. Author of ASP.NET Core in Action (https://mng.bz/5mRz)
Blog: https://andrewlock.net
Mastadon: @[email protected]
Twitter: @andrewlocknet
Unfortunately not - interceptors work on source code, not already-compiled DLLs
Just published a new issues of .NET R&D Digest! Thanks to
@lemire.bsky.social, @maartenballiauw.be, @andrewlock.bsky.social, @chrisnas.bsky.social, @meziantou.net and other great authors for their amazing content!
Stripping extra dependencies in .NET NativeAOT apps using linker substitutions
andrewlock.net/stripping-ex...
In this post I describe how to perform method substitutions with the NativeAOT linker to remove additional dependencies that the linker couldn't see were unused
I published a new article: the hidden trap of fixed buffers in C#. It explains a quirk of fixed buffers that could easily bite you, if you're one of the few people who still have to use that feature.
Time to look at Github Copilot in the fourth episode of my long series about AI harnesses internals
chrisnas.github.io/posts/2026-0...
Experimental support for Device Bound Session Credentials (DBSC) in ASP .NET Core: Exploring the .NET 11 preview - Part 8 by @andrewlock.bsky.social andrewlock.net/exploring-th... #aspnetcore
Blogged: Experimental support for Device Bound Session Credentials (DBSC) in ASP.NET Core - Exploring the .NET 11 preview - Part 8
andrewlock.net/exploring-th...
In this post I look at the new experimental support for DBSC coming in .NET 11
If you're still not convinced that we live in the future. I had my 4yo old son try "Putt-Putt", an old point&click game for children. He loves it, so I bought the whole series on Steam. However, it turns out half of them aren't localized in French, so he can't play them.
Understanding Device Bound Session Credentials (DBSC)
andrewlock.net/understandin...
In this post I provide an introduction to Device Bound Session Credentials, I look at how DBSC protects against session hijacking, and how the protocol works.
A new issue of .NET R&D digest is here! Thanks to
@birgitta410.bsky.social, @andrewlock.bsky.social, @lemire.bsky.social, @meziantou.net, @maartenballiauw.be and other great authors for their amazing content!
Starting this week, my job at JetBrains changes. I'll be focusing less on ReSharper, and more on agents integration inside our IDEs (Rider, IntelliJ, ...).
Blogged: The pain of serializing unions and closed class hierarchies with System.Text.Json in .NET 11
andrewlock.net/exploring-th...
In this post I discuss the System.Text.Json support for unions and closed hierarchies coming in .NET 11, the decisions made and some of the sharp edges I hit #dotnet
Blogged: Using multiline Parameters for Aspire and ASP.NET Core with user secrets and Azure default deployments
I mean, as depressing as it is, that pretty much sums it up
Yes, the evil one, he has a moustache
Better know your HTTP headers! If you've seen Sec-Fetch-Dest and friends but never really knew what they were for, you're in luck!