asp.net mvc 安全测试漏洞 " HTTP 动词篡改的认证旁路" 问题解决
IBM Security Appscan漏洞筛查-HTTP 动词篡改的认证旁路漏洞，具体解决方案:
在Web.Config中system.webServer节点增加配置security:
-
<security>
-
<requestFiltering>
-
<verbs allowUnlisted="false">
-
<add verb="GET" allowed="true" />
-
<add verb="POST" allowed="true" />
-
</verbs>
-
</requestFiltering>
-
</security>
