我们如何关闭 asp.net 中的 webresource.axd 和 scriptresource.axd 漏洞？

Question

We have tried below code in web.config

 <customErrors mode="On" redirectMode="ResponseRewrite" defaultRedirect="~/error.aspx" />

Answer 1

in your web.config, at the bottom just before the closing configuration tag put the following:

<location path="WebResource.axd">
    <system.web>
      <authorization>
        <deny users="*"/>
      </authorization>
    </system.web>
</location>

<location path="ScriptResource.axd">
    <system.web>
      <authorization>
        <deny users="*"/>
      </authorization>
    </system.web>
</location>