Is it possible, at a high level, to limit any redirects that an ASP.NET (3.5) app may do to only be to the same app's domain? In other words, is someone was to fiddle something in the front end, which the app would then use to redirect somewhere, that it would be stopped if it was outside the app's domain?
↧