I'm browsing through Microsoft's best practices guide for security in ASP.NET 2.0 and have encountered some eyeopeners. The authors warn against relying on some of the built-in features of ASP.NET. For example, the ASP.NET 2.0 Internet Security Reference Implementation uses custom functions to...