Hello,
As I am going to be opening my web application to our clients in the near future, I have been researching the above vulnerabilities and would like some ASP.NET specific advise, if possible?
For the security experts out there, does ASP.NET have any in-built measures to prevent SQL Injection and XSS? I think my best option is to validate user-input as much as possible but would just like some friendly advice before commiting the time to the task.
My application (ASP.NET VB) involves a large amount of user input, which is stored in (Microsoft) SQL databases and then displayed on each users pages. (image, say, a forum such as this!).
Any information would be appreciated,
Thanks,
Gavin.
...
Go to the complete details ...