Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am planning to start a new web site on ASP.NET MVC 2 (3).

Does anybody a full (if possible) check list of actions, approaches I should reach to avoid almost problems with security?

share|improve this question
Related Guidance for HTTPS-only sites – LamonteCristo Oct 1 '11 at 15:17
@makerofthings it's useful and good question – garik Oct 1 '11 at 15:23

Barry Dorans, author of Beginning ASP.NET Security, provides some good material on the subject. I read his book and he covers a lot of ASP.NET MVC specific material.

If you are looking for a check list of application security controls, be sure to also check out the OWASP ASVS project.

share|improve this answer
+1 for owasp, thanks – garik Nov 14 '10 at 15:07
Well, there's a chapter on it, but most of the book is core concepts which cover both webforms and MVC. Thanks for the recommendation :) – blowdart Nov 19 '10 at 22:47

Based on this blog post, I'm using POSTs for all my JSON data. This underscores a few items in the Codevanced checklist pasted here.

share|improve this answer
+1 thank for checklist and post – garik Feb 6 '11 at 15:49
That blog post is a great illustration of JSON prototype hijacking. Thank you for the link. – D.W. Sep 5 '11 at 19:07

Here's a video series on how to hack proof your sites, it is two videos of about 50min where he also includes an introduction to the topic, he also includes examples, I havn't seen all of it yet, but I think it will cover some of your questions, or atleast give you som inspiration.

share|improve this answer
Hi @psalomonsen, welcome to Information Security! Can you please edit your answer to include a summary, instead of just linking? See the FAQ, and How to Answer. – AviD Sep 5 '11 at 13:17
+1 thank you... – garik Sep 5 '11 at 14:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.