Ten points to secure your ASP.NET Core MVC applications
– Broken authentication and session management
– Sensitive Data Exposure & Audit trail
– Cross-Site Scripting (XSS) attacks
– Malicious File Upload
– Security Misconfiguration (Error Handling Must Setup Custom Error Page)
– Version Discloser
– Cross-Site Request Forgery (CSRF)
– XML External Entities (XXE)
– Insecure Deserialization
– SQL Injection Attack
https://www.codeproject.com/Articles/1259066/10-Points-to-Secure-Your-ASP-NET-Core-MVC-Applic-2
https://www.codeproject.com/Articles/1259066/10-Points-to-Secure-Your-ASP-NET-Core-MVC-Applic-2
