Tag Info

New answers tagged


If these are directories then you can hide these. A good article is here: Solving the tyranny of HTTP 403 responses to directory browsing in ASP.NET: You may not know this, but an HTTP 403 response when browsing to an empty directory is a serious security risk. What the?! You mean if I go to my website which has a “scripts” folder where I put all my ...


It's a typical scenario with .NET MVC - search-engine friendly URLs are a direct result of proper implementation. But let's have something clear - these are not web directories, but MVC routes, right? Paranoid pen-testers are often uncomfortable when the admin interface is somehow exposed in the URL, since it can attract unwanted attention, or be harvested ...

Top 50 recent answers are included