|visits||member for||2 years, 4 months|
|seen||Oct 31 at 2:16|
I work at Microsoft on the ASP.NET team. My focus is on ASP.NET MVC, the ASP.NET runtime itself (System.Web.dll), and security.
Is ASP.NET Event Validation completely secure?
The absolute safest thing to do would be to check the incoming data before operating with it. If the user is only allowed to select 1 - 10 from the dropdown, then your application logic should enforce this restriction before consuming the data.
Can i get 100% protection from virus by using Deep Freeze?
And lest people think this is only theoretical, there was a concrete example of this at BlackHat a few years back. See semiaccurate.com/2009/07/31/….