Are there any materials from Microsoft on protection for SQL Injection and XSS Threats? I would assume that Microsoft would have measures in place especially considering they do not support direct SQL access, but force everything through the web services. I'm looking for something from Microsoft so I can provide it to our security team if at all possible.
Thanks