dotnet-security-owasp

OWASP Top 10 (2021) security guidance for .NET applications. Each category includes the vulnerability description, .NET-specific risk, mitigation code examples, and common pitfalls. This skill is the canonical owner of deprecated security pattern warnings (CAS, APTCA, .NET Remoting, DCOM, BinaryFormatter).

Scope

• OWASP Top 10 (2021) vulnerability categories with .NET-specific mitigations
• Injection, broken access control, XSS, SSRF prevention patterns
• Deprecated security API warnings (CAS, APTCA, BinaryFormatter, .NET Remoting)
• Security header configuration and CORS hardening
• Rate limiting and anti-forgery middleware patterns
• NuGet package audit and dependency vulnerability scanning

Out of scope