Professional ASP.NET - Chris Love's Official Blog

Cross-Site Scripting attacks are still a frequent occurance across the web.  Fortunately the ASP.NET framework has a built-in protection against this type of attack.  But as good as that is, it is still actually limited to a certain degree.  So it is a good practice to add your own protection layers to applications, guarding ...