Add new Blazor tutorial on BWA with EF Core (#32747)

Author: guardrex

aspnetcore/blazor/call-web-api.md

@@ -901,6 +901,12 @@ Various network tools are publicly available for testing web API backend apps di
 * [Cross-Origin Resource Sharing (CORS) at W3C](https://www.w3.org/TR/cors/)
 * <xref:security/cors>: Although the content applies to ASP.NET Core apps, not Razor components, the article covers general CORS concepts.
 
+### Mitigation of overposting attacks
+
+Web APIs can be vulnerable to an *overposting* attack, also known as a *mass assignment* attack. An overposting attack occurs when a malicious user issues an HTML form POST to the server that processes data for properties that aren't part of the rendered form and that the developer doesn't wish to allow users to modify. The term "overposting" literally means that the malicious user has *over*-POSTed with the form.
+
+For guidance on mitigating overposting attacks, see <xref:tutorials/first-web-api#prevent-over-posting>.
+
 ### Server-side
 
 * <xref:blazor/security/server/additional-scenarios>: Includes coverage on using <xref:System.Net.Http.HttpClient> to make secure web API requests.

aspnetcore/blazor/components/data-binding.md

@@ -553,7 +553,7 @@ Specifying a format for the `date` field type isn't recommended because Blazor h
 
 A common scenario is binding a property of a child component to a property in its parent component. This scenario is called a *chained bind* because multiple levels of binding occur simultaneously.
 
-You can't implement chained binds with [`@bind`](xref:mvc/views/razor#bind) syntax in a child component. An event handler and value must be specified separately to support updating the property in the parent from the child component. The parent component still leverages [`@bind`](xref:mvc/views/razor#bind) syntax to set up databinding with the child component.
+You can't implement chained binds with [`@bind`](xref:mvc/views/razor#bind) syntax in a child component. An event handler and value must be specified separately to support updating the property in the parent from the child component. The parent component still leverages [`@bind`](xref:mvc/views/razor#bind) syntax to set up data binding with the child component.
 
 The following `ChildBind` component has a `Year` component parameter and an <xref:Microsoft.AspNetCore.Components.EventCallback%601>. By convention, the <xref:Microsoft.AspNetCore.Components.EventCallback%601> for the parameter must be named as the component parameter name with a "`Changed`" suffix. The naming syntax is `{PARAMETER NAME}Changed`, where the `{PARAMETER NAME}` placeholder is the parameter name. In the following example, the <xref:Microsoft.AspNetCore.Components.EventCallback%601> is named `YearChanged`.
 

aspnetcore/blazor/components/quickgrid.md

@@ -386,7 +386,6 @@ When you paste multiple commands, all of the commands execute except the last on
 ```dotnetcli
 dotnet tool install --global dotnet-aspnet-codegenerator
 dotnet tool install --global dotnet-ef
-dotnet add package Microsoft.EntityFrameworkCore.Design
 dotnet add package Microsoft.EntityFrameworkCore.SQLite
 dotnet add package Microsoft.VisualStudio.Web.CodeGeneration.Design
 dotnet add package Microsoft.EntityFrameworkCore.SqlServer
@@ -439,7 +438,6 @@ When you paste multiple commands, all of the commands execute except the last on
 ```dotnetcli
 dotnet tool install --global dotnet-aspnet-codegenerator
 dotnet tool install --global dotnet-ef
-dotnet add package Microsoft.EntityFrameworkCore.Design
 dotnet add package Microsoft.EntityFrameworkCore.SQLite
 dotnet add package Microsoft.VisualStudio.Web.CodeGeneration.Design
 dotnet add package Microsoft.EntityFrameworkCore.SqlServer

aspnetcore/blazor/tutorials/index.md

@@ -22,6 +22,8 @@ For an overview of Blazor, see <xref:blazor/index>.
 
 * <xref:blazor/tutorials/build-a-blazor-app> (Blazor Web App)
 
+* <xref:blazor/tutorials/movie-database-app/index> (Blazor Web App)
+
 * <xref:blazor/tutorials/signalr-blazor> (Blazor Web App)
 
 * <xref:blazor/hybrid/tutorials/index>

aspnetcore/blazor/tutorials/movie-database-app/includes/troubleshoot.md

@@ -0,0 +1,5 @@
+If you run into a problem while following the tutorial that you can't resolve from the text, compare your code to the completed project in the Blazor samples repository:
+
+[Blazor samples GitHub repository (`dotnet/blazor-samples`)](https://github.com/dotnet/blazor-samples)
+
+Select the latest version folder. The sample folder for this tutorial's project is named `BlazorWebAppMovies`.

aspnetcore/blazor/tutorials/movie-database-app/index.md

@@ -0,0 +1,57 @@
+---
+title: Build a Blazor movie database app (Overview)
+author: guardrex
+description: This tutorial explains the basics of building a Blazor Web App with a database, Entity Framework (EF) Core, and user interactivity.
+ms.author: riande
+ms.date: 08/26/2024
+monikerRange: '>= aspnetcore-8.0'
+ms.custom: mvc
+uid: blazor/tutorials/movie-database-app/index
+---
+# Build a Blazor movie database app (Overview)
+
+<!-- UPDATE 9.0 Activate after release
+
+[!INCLUDE[](~/includes/not-latest-version.md)]
+
+-->
+
+This tutorial explains the basics of building a Blazor Web App with a database, Entity Framework (EF) Core, and user interactivity.
+
+Parts of this series include:
+
+1. [Create a Blazor Web App](xref:blazor/tutorials/movie-database-app/part-1)
+1. [Add and scaffold a model](xref:blazor/tutorials/movie-database-app/part-2)
+1. [Learn about Razor components](xref:blazor/tutorials/movie-database-app/part-3)
+1. [Work with a database](xref:blazor/tutorials/movie-database-app/part-4)
+1. [Add validation](xref:blazor/tutorials/movie-database-app/part-5)
+1. [Add search](xref:blazor/tutorials/movie-database-app/part-6)
+1. [Add a new field](xref:blazor/tutorials/movie-database-app/part-7)
+1. [Add interactivity](xref:blazor/tutorials/movie-database-app/part-8)
+
+At the end of the tutorial, you'll have a Blazor Web App that can display and manage movies in a movie database.
+
+## Sample app
+
+If you don't intend to create the demonstration app while reading the article, you can refer to the completed sample app in the [Blazor samples GitHub repository (`dotnet/blazor-samples`)](https://github.com/dotnet/blazor-samples). Select the latest version folder in the repository. The sample folder for this tutorial's project is named `BlazorWebAppMovies`.
+
+## Article code examples
+
+The line breaks of code examples shown in the ASP.NET Core documentation often don't match line breaks in scaffolded code generated by tooling for an app. This is due to an article publishing limitation. Lines of code in articles are generally limited to 85 characters in length, and we manually adjust the line length using line breaks to satisfy our publishing guidelines.
+
+As you work through this tutorial or use any other ASP.NET Core article's code examples, you never need to adjust scaffolded code in your app to match the line breaks displayed in article code examples.
+
+## Report a tutorial issue
+
+To open a documentation GitHub issue for an article of the series, use the **Open a documentation issue** link at the bottom of the article. Using the link to create your issue adds important tracking metadata to the issue and automatically pings the author of the article.
+
+## Support requests
+
+We welcome feedback on the tutorial's articles, such as bug reports and comments on the article's text, but we're often unable to provide product support. If you run into a problem while following the tutorial, don't immediately open a documentation issue. Check the steps that you've taken against the article and compare your code to the [sample app](#sample-app) before opening an issue because many problems can be traced to missing a step or not following a step correctly.
+
+For general questions about .NET and Blazor beyond the tutorial and reference documentation or to obtain assistance from the .NET community, converse with developers in [public forums](xref:blazor/fundamentals/index#support-requests).
+
+## Next steps
+
+> [!div class="step-by-step"]
+> [Next: Create a Blazor Web App](xref:blazor/tutorials/movie-database-app/part-1)