I was doing some research in ASP.NET MVC documentation to track down the meaningful differences between version 3 and forthcoming version 4. Accidentally I’ve found an interesting article (Jon Galloway’s AFAIR) about web security (both in general and for ASP.NET MVC specifically). I was never a hardcore security expert, but I had a feeling I’m a bit outdated, so I decided to refresh my view on web security (preferably with a suitable book). That’s how I found a book “Tangled Web” by Michal Zalewski. Before I jump into book’s details, let me…