title: Checklist of steps to secure asp.net web application?
body: <p>I would like to secure an ASP.NET web application against hacking. Is there a list of ASP.NET specific tasks specifically coding wise to make an ASP.NET more secure? Beyond what is mentioned on <a href="http://msdn.microsoft.com/en-us/library/ms998367.aspx" rel="noreferrer">MSDN</a>. I am interested in specific steps with code examples on ways to avoid cross site request forgeries &amp; cross site scripting. </p>
  
  <p>I know about using SQL parameters for sql injection, Windows authentication when connecting to SQL Server and validating form's input on the server.</p>