title: Prevent html injection in a asp mvc dropdownlist
body: <p>I have a website that has several drop-down-lists, all are created from a database lookup.</p>
  
  <p>These controls have simple model state validation and this all works as expected.</p>
  
  <p>However, I have noticed that if I add an extra item to the drop-down list on the client this appears to still get submitted correctly. is there a way I can validate this or do I need to add a custom validation property on my drop downs to support this?</p>
  
  <p>I am using asp.net MVC 5 with an entity framework 6 storage.</p>