Validation of inputs to avoid security vulnerabilities (e.g. SQL?

injection, XSS etc)

• Use parameterized queries / ORM to prevent SQL injection.
• Sanitize and encode user input to prevent XSS.
• Validate inputs rigorously on server side.
• Use built-in validation attributes and custom validators.

Sample / Misc Interview Questions