What’s wrong with toggling detailed IIS errors for production?
What is the danger of setting IIS errorMode to detailed in webconfig? It helps me marginally with sanity checks on production, but it seems like it wouldn’t really help a bad actor much. I’d like to set production to detailed errors, but… Continue reading What’s wrong with toggling detailed IIS errors for production?