I was told today that RequestValidation does *not* check for the Headers of a request coming into an application, so be careful if you output any of the headers.
No Comments