Securing Your Data in ASP.NET XmlProviders

Configuring ASP.NET XmlSiteMapProvider allows you to manage website navigation structures using hierarchical XML files. By default, ASP.NET implicitly enables an instance of XmlSiteMapProvider to read a root Web.sitemap file, but you can customize this or link multiple site maps together using the Web.config file. 1. Build the XML Site Map File

The sitemap layout requires a single root element containing exactly one top-level . You can then nest additional nodes inside it to represent your subpages. Create a file named Web.sitemap in your application’s root directory:

<?xml version=“1.0” encoding=“utf-8” ?> Use code with caution. 2. Configure Providers in Web.config

If you rely only on a single Web.sitemap file at the root, you do not need to explicitly declare it because ASP.NET registers it automatically. However, if you want to use multiple sitemap files or rename your files, you must add them to the section in your Web.config file:

Use code with caution.

securityTrimmingEnabled=“true”: Restricts navigation links based on user roles. 3. Link Multiple Site Maps Together

You can dynamically nest a child map inside a parent map instead of managing everything in one large file. To link a child map file directly from Web.sitemap, point to its path:

Use code with caution.

Alternatively, link to a secondary provider explicitly named in your Web.config: Use code with caution. 4. Bind the Provider to UI Navigation Controls How to: Configure Multiple Site Maps and Site-Map Providers