Checklist of steps to secure asp.net web application?
asp.net, deployment, security
Solution
From Microsoft- http://msdn.microsoft.com/en-us/library/ms998249.aspx
A more detailed checklist- http://technotes.towardsjob.com/dotnet/asp-net-developers-checklist-security-checklist/
Problem
I would like to secure an ASP.NET web application against hacking. Is there a list of ASP.NET specific tasks specifically coding wise to make an ASP.NET more secure? Beyond what is mentioned on MSDN. I am interested in specific steps with code examples on ways to avoid cross site request forgeries & cross site scripting. I know about using SQL parameters for sql injection, Windows authentication when connecting to SQL Server and validating form's input on the server.