Reputation: 51917
I'm doing a lot of ajax calls to the server with jquery and I've been looking around but found no definitive solution other than this.
I was wondering if someone could detail the steps to take both on the server and on the client to make an asp.net application secure.
Thanks.
Upvotes: 1
Views: 101
Reputation: 73554
The definitive guide to csrf protection can be found at the OWASP site here.
For .NET, they recommend the .NET CSRF Guard, which we use on our sites.
The OWASP site is an excellent resource for secure web development information. I strongly recommend it to anyone that isn't already familiar. A good place to start is the top 10 project.
Upvotes: 1