Security Concern in ASP.NET & Web Development

Accepted answer

Basic consideration for securing asp.net solutions are:

Cross-Site Scripting (XSS)

SQL Injection

Cross-Site Request Forgery (CSRF)

Custom Error Page for Error Handling

Version Discloser

Enforce SSL (Secure Sockets Layer) and HSTS

XXE (XML External Entity) Attack

Improper Authentication and Session Management

Sensitive Data Exposure and Audit Trail

File Upload Validation

Check these blogs:

https://www.syncfusion.com/blogs/post/10-practices-secure-asp-net-core-mvc-app.aspx

https://support.microsoft.com/en-us/topic/asp-net-security-overview-7c8562d3-7bea-306c-4c78-98dd6c6993b3

+1

You are welcome!

0

Thank you!

0