Let me start this article saying that even the most secure VB.NET or C# code can still be vulnerable to various attack vectors if as a developer you neglect the enhanced security configurations of web.config file. To make matters worse Web.config files were designed to be changed at any time, even after the Web-based applications [...]
Read more…