Continuous Web.config security analysis with WCSA and TeamCity

home
asp.net
view story

2 Kicks

Continuous Web.config security analysis with WCSA and TeamCity(www.troyhunt.com)

submitted by troyhunt(831) 1 year, 2 months ago

Ah, automation. Any time I find myself doing the same thing more than once, I get the inclination to bundle it all up into something that can begin happening with a single click. Or even better, with no clicks. Recently I’ve begun using the Web.Config Security Analyser. This little beauty let’s you feed in a Web.config then it comes back and tells you everything you’ve done wrong in the world of security configuration. Since the Web.config tends to change a bit over time and poses a potentially serious security risk if it’s implemented poorly, inspecting it is ripe for automation.

add a comment |category: ASP.NET |Views: 3
Tweet