I want to prevent posting sensitive data via url query string to a MVC 5 application.
In MVC there is a DefaultModelBinder. The DefaultModelBinder
DefaultModelBinder
Why not use form's then? On submit you post form data