I think we should change all the live sites' web.config with debug="false". It's both insecure and inefficient to leave debug="true" on a live site based on these two articles:
http://weblogs.asp.net/scottgu/archive/2006/04/11/442448.aspx
http://networking.itbusinessnet.com/articles/viewarticle.jsp?id=135133
If we remember to do that every time we publish a site, we might be able to use that info to tell if it's from test site or live site.
Subscribe to:
Post Comments (Atom)
1 comment:
I think that's a very good idea.
Post a Comment