AntiForgeryToken in ASP.NET MVC to Prevent Cross-Site Request Forgery Attacks

Both Phil Haack and Steve Sanderson have good tutorials on how to prevent Cross-Site Request Forgery Attacks using built-in ASP.NET MVC Helpers.

• Anatomy of a Cross-site Request Forgery Attack
• Prevent Cross-Site Request Forgery (CSRF) using ASP.NET MVC’s AntiForgeryToken() helper

 

ASP.NET MVC Resources

• ASP.NET MVC T4 Template Code Generation with SubSonic Screencast and Code
• ASP.NET MVC Best Practices
• ASP.NET MVC Sample Applications - Open-Source Examples and Tutorials
• ASP.NET MVC Screencasts Videos and Webcasts - Learn ASP.NET MVC Framework
• ASP.NET MVC Videos and Screencasts from MIX 09 Sessions - Free Training
• Download ASP.NET MVC Sample Movie Database Application from DevConnections
• ASP.NET MVC Training Kit - Hand-On Labs Samples Tutorials Presentations