Are applications built on ASP.NET 2.0 still vulnerable to "HTTP response
splitting" attacks inspite of enableheaderschecking, request validation and
CR/LF checks in response.redirect?
If vulnerability does exist, what are the additional things that the
developers need to take care themselves in order to protect their sites from
response splitting attacks.
