Security problem of mapping file structure of Azure Web App and other IIS APP – part 1.
If you deploy sample ASP.NET 4.x pure, out of the box web app (https://portal.azure.com/#create/Microsoft.WebSite) the behaviors is like: https://pure.azurewebsites.net/yfgrueygfuyrgfrf – 404 error – what is ok… https://pure.azurewebsites.net/a/a.txt – 200 OK (of course you need first put a.txt file to this directory) https://pure.azurewebsites.net/a/ – 403 forbidden – so it means that hacker can search for something […]