DotNetShoutout

Welcome!

DotNetShoutout is a place where you can find the latest Microsoft .NET stories to increase your skills and share your opinions.

Enjoy participating in this community and see which other people in our industry are getting Shoutouts.

faq »

9
Shouts

Shout it

Continuous Web.config security analysis with WCSA and TeamCity

published 783 days, 19 hours, 38 minutes ago posted by

http://troyhunt.myopenid.com/ 790 days, 8 minutes ago

Ah, automation. Any time I find myself doing the same thing more than once, I get the inclination to bundle it all up into something that can begin happening with a single click. Or even better, with no clicks.

Recently I’ve begun using the Web.Config Security Analyser. This little beauty let’s you feed in a Web.config then it comes back and tells you everything you’ve done wrong in the world of security configuration.

Since the Web.config tends to change a bit over time and poses a potentially serious security risk if it’s implemented poorly, inspecting it is ripe for automation.