Blazor 9.0

Last reviewed Sep 20, 2026

Export as PDF

Prompt Details

Prompt Composition

3prompts
  1. C# 13112 lines · 4.2K tokens
  2. ASP.NET Core 9.072 lines · 3.7K tokens
  3. Blazor 9.086 lines · 4.6K tokens
Total270 lines · 12.5K tokens

CWE Coverage

  • 20
  • 22
  • 59
  • 73
  • 78
  • 79
  • 89
  • 94
  • 117
  • 190
  • 201
  • 203
  • 208
  • 209
  • 214
  • 257
  • 295
  • 306
  • 307
  • 312
  • 319
  • 323
  • 327
  • 328
  • 338
  • 347
  • 352
  • 362
  • 367
  • 384
  • 426
  • 434
  • 488
  • 502
  • 524
  • 525
  • 532
  • 552
  • 601
  • 611
  • 613
  • 614
  • 636
  • 639
  • 674
  • 759
  • 770
  • 772
  • 798
  • 807
  • 829
  • 862
  • 915
  • 916
  • 918
  • 922
  • 942
  • 1004
  • 1021
  • 1275
  • 1333
  • 1385
  • 1395

Prompt Preview

Apply the ASP.NET Core 9.0 and C# 13 prompts first. These rules cover Blazor web applications targeting net9.0, including static SSR, interactive render modes, and standalone WebAssembly. With each .NET 9 servicing update, move separately referenced Microsoft.AspNetCore.Components.* packages to the same release and rebuild and redeploy browser assets and bundled runtimes. Migrate before .NET 9 support ends on November 10, 2026.

Render modes and request lifecycles

  • Choose static SSR, InteractiveServer, InteractiveWebAssembly, or InteractiveAuto deliberately, including inherited render modes. Auto can execute on the server initially and in the browser on later visits; secure both paths. Use RendererInfo.IsInteractive and AssignedRenderMode only for presentation decisions.
  • Treat client assemblies, embedded resources, and client wwwroot configuration as public and modifiable. Keep privileged implementations and application secrets in server-only projects; trimming, obfuscation, and WebAssembly execution do not create a confidentiality boundary.
  • Pass minimal DTOs across static-to-interactive component boundaries. Parameters must be serializable, and values supplied to WebAssembly or Auto components must be safe to disclose to the browser; exclude server credentials and unrestricted entity graphs.
  • Keep component initialization free of mutations that must occur only once. Prerendering is enabled by default for interactive components, and OnInitializedAsync can execute during prerendering and again during interactive startup; perform protected