ASP.NET
26 posts tagged with this.
-
Security Headers for ASP.NET Core 10 on IIS
Missing response headers still open clickjacking and MIME sniff paths on hosted ASP.NET sites. Wire HSTS, CSP, and cookie flags once in middleware or web.config.
-
Safe File Uploads for ASP.NET Core on IIS
Stop treating uploads as trusted input. Validate type and size in ASP.NET Core, constrain IIS limits, and keep files outside the web root on Windows hosts.
-
Lock web.config Sections with IIS Feature Delegation
Stop risky site-level overrides before they hit the worker process. Use IIS Feature Delegation and PowerShell to lock the sections that matter on Windows Server 2025 hosts.
-
Patch Discipline for .NET on IIS and SQL Server
Unpatched runtimes beat fancy headers as a breach path. Build a repeatable patch cadence for the Hosting Bundle, IIS, and SQL Server on Windows hosts.
-
Harden Schannel TLS for IIS on Server 2025
Legacy TLS protocols and weak ciphers still linger on IIS hosts. Tighten Schannel on Windows Server 2025 so ASP.NET sites negotiate modern, browser-safe connections.
-
Debug Slow IIS Pages with Failed Request Tracing
Turn on IIS Failed Request Tracing for ASP.NET apps without drowning in logs. Capture slow pages and 500s with tight rules you can leave on shared hosts.
-
Least Privilege for ASP.NET on IIS and SQL Server
Shrink IIS app pool rights and SQL logins so a compromised ASP.NET site cannot roam the box. Concrete ACL, identity, and T-SQL patterns for production hosts.
-
IIS Request Filtering That Stops Bad Traffic Early
Block hostile URLs, verbs, and extensions at IIS before ASP.NET runs. Practical requestFiltering settings for Windows hosts and .NET apps.
-
32-bit vs 64-bit IIS App Pools for .NET Apps
Pick the right IIS app pool bitness for .NET Framework and .NET 10 apps. Avoid native DLL load failures, address-space traps, and surprise memory pressure.
-
IIS SNI Certificate Bindings on Windows Server 2025
SNI lets one IIS IP serve many HTTPS hostnames with separate certificates. Bind and rotate certs on Windows Server 2025 without knocking other sites offline.
-
App Pool Recycling That Won't Wake You at 3 AM
Bad IIS app pool defaults cause more ASP.NET outages than flaky deploys. Tune recycling, bitness, and Full Trust for stable Windows shared hosting.
-
Harden ASP.NET on IIS: Headers, Cookies, Secrets
Most hosted ASP.NET breaches start with missing headers, weak cookies, and secrets in Web.config. Harden IIS and .NET 10 apps with concrete config you can ship today.
-
IIS App Pool Recycling That Won't Surprise You
Most ASP.NET instability on Windows hosting traces to app pool defaults, not application bugs. Set recycling, bitness, and idle timeout so restarts stay scheduled and predictable.
-
Fixing System.ComponentModel.Win32Exception: Access is Denied
The System.ComponentModel.Win32Exception: Access is denied error occurs after publishing .NET 4.5 or higher applications when the runtime cannot execute bin/roslyn/csc.exe due to missing permissions. This guide provides context on why it happens on Windows hosting plus two proven solutions: uninstal
-
Hide Items by Status Addon Changelog & Release Details
Version 1.1.0 of the Hide Items by Status Addon was released on 08.05.2015 as the initial release. This guide provides the original changelog entry along with expanded context on its purpose for .NET applications, prerequisites, step-by-step installation and configuration, code samples, common pitfa