Plan your routes
Setting up your routing carefully can offer significant performance
improvements.

Think before you data bind
Data binding can allow attackers to change values you did not expose on the form. Use
with care.

More info: http://tinyurl.com/aspnetmvcpp6

More info: http://tinyurl.com/aspnetmvcpp1

Split your view into multiple view controls
Keep the controller thin
The less the controller does the easier the maintenance is. Any logic should be in the
model.
More info: http://tinyurl.com/aspnetmvcpp2

Regardless of reusability, having multiple view controls makes large views
more readable.
More info: http://tinyurl.com/aspnetmvcpp7

ASP.net | MVC

Create UrlHelper extensions
Rather than putting strings in your view, create UrlHelper extensions to keep your view
clean.

Proven Practises Cheat Sheet

More info: http://tinyurl.com/aspnetmvcpp3

Separation of Concerns
Keep the controller HTTP free
There should be no HTTP specific code in the controller.

SoC is a software design practise for keeping your HTML, CSS and JS
separate and clean. This should be taken further to avoid the dreaded
classic ASP tag soup.
More info: http://tinyurl.com/aspnetmvcpp8 and http://tinyurl.com/aspnetmvcpp9

More info: http://tinyurl.com/aspnetmvcpp4

The basics of security still apply

Use the OutputCache attribute
Decorate methods which are called often, but not change the values often with the
OutputCache attribute to improve performance.
More info: http://tinyurl.com/aspnetmvcpp5

The basics of security, like trusting user input is still a bad idea. When
detailing with user input use the Html.Encode, Html.AttributeEncode or
Url.Encode.
More info: http://tinyurl.com/aspnetmvcpp10

Decorate your actions with AcceptVerb
Decorate your actions with the AcceptVerb’s attribute to limit how a method can be called. Any data modification should be decorated with AcceptVerbs.Post
More info: http://tinyurl.com/aspnetmvcpp11

ASP.NET MVC is a free, fully supported, web framework that provides total control over your HTML and URLs,
enables rich AJAX scripting, and facilitates test driven development.

ASP.NET