Do I need to do anything special in my application to stop Cross Site Request Forgery?

 Hello,
I am using asp.net 3.5 and have validateRequest="true" in the machine.config.
Do I need to do something special to stop CSRF and Cross Site scripting or asp.net will handle all these?


Thanks.

...