Security features provided in ASP.net MVC approach.

We can use two process of Security feature in MVC Technology. 1. Using ASP.Net configuration management as like Built-In Techniques Project menu --> ASP.Net configuration. 2. Coding Level Architecture Security with database.

we have following different option to keep our application secure. 1.Authentication There are two authentication mechanisms in MVC : a. Forms Authentication b. Windows Authentication c. Oauth 2.Authorization - we have AuthorizationFilter - we can implement the Authorization by using [Authorise] to implement Authorization filter in MVC. 3.XSS -ASP.NET automatically reject this request to prevent Cross site scripting attack because the ASP.NET is going to look for anything that resembles the html and just reject the request 4.CSRF(Cross Site Request Forgery) [email protected]() and ValidateAntiForgeryToken can be used to stop CSRF