@@ -8,139 +8,90 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
88-->
99<configuration >
1010 <configSections >
11- <section name =" log4net" type =" log4net.Config.Log4NetConfigurationSectionHandler, log4net" />
12- <sectionGroup name =" system.web.extensions" type =" System.Web.Configuration.SystemWebExtensionsSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" >
13- <sectionGroup name =" scripting" type =" System.Web.Configuration.ScriptingSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" >
14- <section name =" scriptResourceHandler" type =" System.Web.Configuration.ScriptingScriptResourceHandlerSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission =" false" allowDefinition =" MachineToApplication" />
15- <sectionGroup name =" webServices" type =" System.Web.Configuration.ScriptingWebServicesSectionGroup, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" >
16- <section name =" jsonSerialization" type =" System.Web.Configuration.ScriptingJsonSerializationSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission =" false" allowDefinition =" Everywhere" />
17- <section name =" profileService" type =" System.Web.Configuration.ScriptingProfileServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission =" false" allowDefinition =" MachineToApplication" />
18- <section name =" authenticationService" type =" System.Web.Configuration.ScriptingAuthenticationServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission =" false" allowDefinition =" MachineToApplication" />
19- <section name =" roleService" type =" System.Web.Configuration.ScriptingRoleServiceSection, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission =" false" allowDefinition =" MachineToApplication" />
20- </sectionGroup >
21- </sectionGroup >
22- </sectionGroup >
11+ <section name =" log4net" type =" log4net.Config.Log4NetConfigurationSectionHandler, log4net" />
2312 </configSections >
2413 <log4net debug =" true" >
2514 <appender name =" RollingLogFileAppender" type =" log4net.Appender.RollingFileAppender" >
26- <file value =" App_Data/log.txt" />
27- <appendToFile value =" true" />
28- <rollingStyle value =" Size" />
29- <maxSizeRollBackups value =" 10" />
30- <maximumFileSize value =" 10MB" />
31- <staticLogFileName value =" true" />
15+ <file value =" App_Data/log.txt" />
16+ <appendToFile value =" true" />
17+ <rollingStyle value =" Size" />
18+ <maxSizeRollBackups value =" 10" />
19+ <maximumFileSize value =" 10MB" />
20+ <staticLogFileName value =" true" />
3221 <layout type =" log4net.Layout.PatternLayout" >
33- <conversionPattern value =" %-5p %d %5rms %-22.22c{1} %-18.18M - %m%n" />
22+ <conversionPattern value =" %-5p %d %5rms %-22.22c{1} %-18.18M - %m%n" />
3423 </layout >
3524 </appender >
3625 <root >
37- <level value =" DEBUG" />
38- <appender-ref ref =" RollingLogFileAppender" />
26+ <level value =" DEBUG" />
27+ <appender-ref ref =" RollingLogFileAppender" />
3928 </root >
4029 </log4net >
30+ <!--
31+ For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
32+
33+ The following attributes can be set on the <httpRuntime> tag.
34+ <system.Web>
35+ <httpRuntime targetFramework="4.7.2" />
36+ </system.Web>
37+ -->
4138 <system .web>
4239 <siteMap >
4340 <providers >
44- <remove name =" MySqlSiteMapProvider" />
41+ <remove name =" MySqlSiteMapProvider" />
4542 </providers >
4643 </siteMap >
4744 <!-- this disables header checking -->
48- <httpRuntime enableHeaderChecking =" false" />
45+ <httpRuntime enableHeaderChecking =" false" />
4946 <!-- this is how you would set secure and http only on session cookies -->
50- <httpCookies httpOnlyCookies =" false" requireSSL =" false" />
51- <compilation defaultLanguage =" C#" debug =" true" >
47+ <httpCookies httpOnlyCookies =" false" requireSSL =" false" />
48+ <compilation defaultLanguage =" C#" debug =" true" targetFramework = " 4.7.2 " >
5249 <assemblies >
5350 <!-- add assembly="System.Web.Mobile, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /-->
54- <add assembly =" Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756" />
51+ <add assembly =" Mono.Data.Sqlite, Version=2.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756" />
5552 </assemblies >
5653 </compilation >
5754 <!-- show detailed error messages -->
58- <customErrors mode =" Off" />
55+ <customErrors mode =" Off" />
5956 <!-- set up users -->
6057 <authentication mode =" Forms" >
6158 <forms name =" customer_login" timeout =" 30" loginUrl =" ~/WebGoatCoins/CustomerLogin.aspx" requireSSL =" false" protection =" All" path =" /" >
6259 <credentials passwordFormat =" Clear" >
63- <user name =" admin" password =" admin" />
64- <user name =" mario" password =" luigi" />
65- <user name =" bob" password =" password" />
60+ <user name =" admin" password =" admin" />
61+ <user name =" mario" password =" luigi" />
62+ <user name =" bob" password =" password" />
6663 </credentials >
6764 </forms >
6865 </authentication >
6966 <authorization >
70- <allow users =" *" />
67+ <allow users =" *" />
7168 </authorization >
72- <httpHandlers >
73- <remove verb =" *" path =" *.asmx" />
74- <add verb =" *" path =" *.asmx" validate =" false" type =" System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
75- <add verb =" *" path =" *_AppService.axd" validate =" false" type =" System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
76- <add verb =" GET,HEAD" path =" ScriptResource.axd" validate =" false" type =" System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
77- </httpHandlers >
78- <trace enabled =" false" localOnly =" true" pageOutput =" false" requestLimit =" 10" traceMode =" SortByTime" />
79- <sessionState mode =" InProc" cookieless =" false" timeout =" 20000" />
69+ <trace enabled =" false" localOnly =" true" pageOutput =" false" requestLimit =" 10" traceMode =" SortByTime" />
70+ <sessionState mode =" InProc" cookieless =" false" timeout =" 20000" />
8071 <!-- setting cookieless = true breaks app -->
81- <globalization requestEncoding =" utf-8" responseEncoding =" utf-8" />
82- <pages styleSheetTheme =" Default" >
72+ <globalization requestEncoding =" utf-8" responseEncoding =" utf-8" />
73+ <pages styleSheetTheme =" Default" controlRenderingCompatibilityVersion = " 3.5 " clientIDMode = " AutoID " >
8374 <namespaces >
84- <clear />
85- <add namespace =" System" />
86- <add namespace =" System.Collections" />
87- <add namespace =" System.Collections.Generic" />
88- <add namespace =" System.Collections.Specialized" />
89- <add namespace =" System.Configuration" />
90- <add namespace =" System.Text" />
91- <add namespace =" System.Text.RegularExpressions" />
92- <add namespace =" System.Web" />
93- <add namespace =" System.Web.Caching" />
94- <add namespace =" System.Web.SessionState" />
95- <add namespace =" System.Web.Security" />
96- <add namespace =" System.Web.Profile" />
97- <add namespace =" System.Web.UI" />
98- <add namespace =" System.Web.UI.WebControls" />
99- <add namespace =" System.Web.UI.WebControls.WebParts" />
100- <add namespace =" System.Web.UI.HtmlControls" />
75+ <clear />
76+ <add namespace =" System" />
77+ <add namespace =" System.Collections" />
78+ <add namespace =" System.Collections.Generic" />
79+ <add namespace =" System.Collections.Specialized" />
80+ <add namespace =" System.Configuration" />
81+ <add namespace =" System.Text" />
82+ <add namespace =" System.Text.RegularExpressions" />
83+ <add namespace =" System.Web" />
84+ <add namespace =" System.Web.Caching" />
85+ <add namespace =" System.Web.SessionState" />
86+ <add namespace =" System.Web.Security" />
87+ <add namespace =" System.Web.Profile" />
88+ <add namespace =" System.Web.UI" />
89+ <add namespace =" System.Web.UI.WebControls" />
90+ <add namespace =" System.Web.UI.WebControls.WebParts" />
91+ <add namespace =" System.Web.UI.HtmlControls" />
10192 </namespaces >
102- <controls >
103- <add tagPrefix =" asp" namespace =" System.Web.UI" assembly =" System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
104- <add tagPrefix =" asp" namespace =" System.Web.UI.WebControls" assembly =" System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
105- </controls >
10693 </pages >
10794 </system .web>
108- <system .codedom>
109- <compilers >
110- <compiler language =" c#;cs;csharp" extension =" .cs" type =" Microsoft.CSharp.CSharpCodeProvider,System, Version=2.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" warningLevel =" 4" >
111- <providerOption name =" CompilerVersion" value =" v3.5" />
112- <providerOption name =" WarnAsError" value =" false" />
113- </compiler >
114- </compilers >
115- </system .codedom>
116- <system .webServer>
117- <validation validateIntegratedModeConfiguration =" false" />
118- <modules >
119- <remove name =" ScriptModule" />
120- <add name =" ScriptModule" preCondition =" managedHandler" type =" System.Web.Handlers.ScriptModule, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
121- </modules >
122- <handlers >
123- <remove name =" WebServiceHandlerFactory-Integrated" />
124- <remove name =" ScriptHandlerFactory" />
125- <remove name =" ScriptHandlerFactoryAppServices" />
126- <remove name =" ScriptResource" />
127- <add name =" ScriptHandlerFactory" verb =" *" path =" *.asmx" preCondition =" integratedMode" type =" System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
128- <add name =" ScriptHandlerFactoryAppServices" verb =" *" path =" *_AppService.axd" preCondition =" integratedMode" type =" System.Web.Script.Services.ScriptHandlerFactory, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
129- <add name =" ScriptResource" verb =" GET,HEAD" path =" ScriptResource.axd" preCondition =" integratedMode" type =" System.Web.Handlers.ScriptResourceHandler, System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" />
130- </handlers >
131- </system .webServer>
132- <runtime >
133- <assemblyBinding xmlns =" urn:schemas-microsoft-com:asm.v1" >
134- <dependentAssembly >
135- <assemblyIdentity name =" System.Web.Extensions" publicKeyToken =" 31bf3856ad364e35" />
136- <bindingRedirect oldVersion =" 1.0.0.0-1.1.0.0" newVersion =" 3.5.0.0" />
137- </dependentAssembly >
138- <dependentAssembly >
139- <assemblyIdentity name =" System.Web.Extensions.Design" publicKeyToken =" 31bf3856ad364e35" />
140- <bindingRedirect oldVersion =" 1.0.0.0-1.1.0.0" newVersion =" 3.5.0.0" />
141- </dependentAssembly >
142- </assemblyBinding >
143- </runtime >
14495 <!--
14596 <location path="Login.aspx">
14697 <system.web>
@@ -169,9 +120,9 @@ http://msdn2.microsoft.com/en-us/library/b5ysx397.aspx
169120 <location path =" Content/VerbTamperingAttack.aspx" >
170121 <system .web>
171122 <authorization >
172- <allow verbs =" GET" users =" Admin" />
173- <deny verbs =" POST,GET" users =" *" />
123+ <allow verbs =" GET" users =" Admin" />
124+ <deny verbs =" POST,GET" users =" *" />
174125 </authorization >
175126 </system .web>
176127 </location >
177- </configuration >
128+ </configuration >
0 commit comments