Are files put into the Pages/Shared folder public to the whole WWW if the website is hosted publicly? I am asking since I want to implement a partial view load thru a controller and want to know whether it's secure.

I am using ASP.NET Core version 6 if that matters.

1 Answer 1


By default, no. Those are files used to render pages on server side. If you will not modify the configuration of where from static files are hosted or the IIS setup (open directory browser feature) you should be secure.

  • Does this apply to the default settings of Azure Web Apps too?
    – Munchkin
    Oct 23, 2021 at 11:24
  • As far as I know ASP.NET Core apps behave the same on Azure Web Apps and on premise. Oct 23, 2021 at 11:40
  • I mean the IIS settings on the Azure Web App
    – Munchkin
    Oct 23, 2021 at 11:41
  • Yes. It is the same on IIS Azure Web Apps. Oct 23, 2021 at 11:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.