Introduction to ASP.NET Core Security

With a solid foundation of security under your belt, it’s time to start diving more deeply into ASP.NET. A bad book on security probably would jump into how to configure the security that comes built into the framework. But this approach would possibly leave you vulnerable to credential stuffing attacks, CSRF attacks, or XSS attacks via an improperly implemented IHtmlHelper. Instead, as with the rest of the book, I’m here to teach you how real security works and how ASP.NET really works, so you can not only implement security well in the happy-path scenarios but also implement good security when the framework doesn’t quite meet your needs.