Remove httpHandlers from web.config: safe ?

Topics: Core, General, Writing modules
Nov 28, 2011 at 9:46 AM


Is it dangerous to remove those lines from Orchard.Web web.config file ?

      <!-- see below -->
      <clear />
      <add path="*" verb="*" type="System.Web.HttpNotFoundHandler"/>


Does it turn some security process off ?

Thanks in advance for your answer.

Nov 28, 2011 at 9:59 PM

Yes. In the sense that you are increasing the attack surface.

Nov 30, 2011 at 3:43 PM

Thanks for answering an MVC question.

I thought it was an Orchard limitation. Sorry to waste your time bertrand.

Dec 1, 2011 at 4:10 AM

No problem.