see http://blogs.msdn.com/b/rickandy/archive/2011/05/02/securing-your-asp-net-mvc-3-application.aspx#comments whitelist strategy
Log in to post a comment.