[转帖]利用 ASP.NET 的内置功能抵御 Web 攻击

http://www.microsoft.com/china/msdn/library/webservices/asp.net/securitybarriers.mspx