asp.net session security
<p>If I put some pretty sensitive information in a session variable, how secure is it? Can it be access by a client writing a rogue page and making an ajax call to my application? </p>

<p>Thanks.</p>
