I\'m in the process of adding some UI functionality to a hybrid WebForms/MVC site. In this case, I\'m adding some AJAX UI features to a WebForms page (via jQuery), and the
By default, ASP.NET WebForms already include measures to validate events and viewstate. Phil Haack talks a little bit about that in the linked post. XSRF mitigation strategies are talked about here (Scott Hanselman) and here (Dino Esposito)