Security Practices
One of the key things that developers can do to help secure their systems is to write code that can withstand attack and use security features properly. As Web Part developers, you should pay particular attention to
- Preventing scripting vulnerabilities
- Preventing SQL injection
- Creating safe ActiveX controls
- Digitally signing your code (including Web Parts)
- Preventing caching vulnerabilities (including Web Part caching)
- Property validation
To get the most up-to-date information about these issues, along with additional information about writing secure code, see the Microsoft Security Developer Center on MSDN.
For more information about how Microsoft SharePoint Products and Technolgies takes advantage of the code access security that is provided in the .NET Framework, see Code Access Security for Developers.