Tip: Replacing Html.Encode Calls With New Html Encoding Syntax

Like the well disciplined secure developer that you are, when you built your ASP.NET MVC 1.0 application, you remembered to call Html.Encode every time you output a value that came from user input. Didn’t you?