security of MVC3 application

Question

I am currently working on an Asp.Net MVC3 project for a front end eCommerce site. I am doing some research in to security of the controller actions, in particular XSS etc. Could anyone point me to some relevant articles and/or blog posts that would assist me with securing my application?

Did you google it ? http://stackoverflow.com/questions/3955658/how-do-you-avoid-xss-vulnerabilities-in-asp-net-mvc and http://haacked.com/archive/2010/04/06/using-antixss-as-the-default-encoder-for-asp-net.aspx — Shyju, Aug 17 '12 at 17:29

score 0 · Answer 1 · answered Aug 17 '12 at 17:29

0

I found this article to be nice in concerning XSS in understanding XSS.

http://msdn.microsoft.com/en-us/magazine/hh708755.aspx

answered Aug 17 '12 at 17:29

Adam

3,503
6
30
50

score 0 · Answer 2 · answered Aug 17 '12 at 17:32

Here is the MVC Security Overview from ASP.net/MVC

This is a FREE video from Pluralsight that covers MVC3 security including XSS, Windows Authentication, Forms Authentication, and the ASP.net Membership Provider. MVC3 Security

Here are some additional links on the topic:

Securing your MVC3 Application by Rick Anderson

MVC Security with Haack and Hanselman

security of MVC3 application

2 Answers2