10. ASP.NET security

This chapter covers Analyzing security threats Handling untrusted user input Techniques to prevent SQL injection Cross-site scripting (XSS) in action Path canonicalization issues

In previous chapters, we covered both ASP.NET Web Forms and MVC, and how your application might benefit from new features available in version 4.0. Now it’s time to take a look at security, which is a fundamental aspect of every well-realized application.