Web Security
5 posts tagged with this.
-
Harden ASP.NET Core Auth Cookies on IIS
Lock down cookie authentication for ASP.NET Core 10 on IIS: Secure, HttpOnly, SameSite, names, and lifetimes, with concrete CookieOptions.
-
Security Headers for ASP.NET Core 10 on IIS
Missing response headers still open clickjacking and MIME sniffing paths on hosted ASP.NET sites. Wire HSTS, CSP, and cookie flags once.
-
Safe File Uploads for ASP.NET Core on IIS
Stop treating uploads as trusted input. Validate type and size in ASP.NET Core, constrain IIS limits, and keep files outside the web root on Windows hosts.
-
Harden ASP.NET on IIS: Headers, Cookies, Secrets
Most hosted ASP.NET breaches start with missing headers, weak cookies, and secrets in Web.config. Harden IIS and .NET 10 apps with concrete config.
-
What Is the Geo Filtering Module? Usage and Performance Effects
ASPnix's Geo Filtering IIS module blocks traffic from specified countries via IP geolocation lookups, returning an HTTP 403 Forbidden page to restricted visitors while allowing others normal access. It adds at most 50ms to response times with no impact at 1000 requests per second. This guide details