Ours is .net 4 web application. We've few hidden fields on the form.
When the site was tested for XSS vulnerabilities, these hidden fields were the first victims:(. How to protect or safeguard hidden fields? For normal textboxes and other fields, we've server side validation but how to check\avoid xss issue for hidden fields?