Hows does one prevent passwords and other sensitive information from appearing in an ASP.NET dump?
问题 How does one prevent passwords and other sensitive data submitted to and received from ASP.NET web pages in IIS/ASP.NET dump files? Steps to reproduce Using Visual Studio 2010, create a ASP.NET MVC 3 intranet application. Configure it to use IIS 7.5. Fire it up and register an account (say bob123 as the user and Pa$$w0Rd as the password. I'm assuming that the SQL Express database is created and the site is fully functional. Using task manager, right click on the w3wp process and create a dump