How do I restrict access to files with specific extensions in ASP.NET?

Question

I have in my web application an ADO.NET Entity-Framework *.edmx file.

When I browse in the browser (when the application is running) to an edmx file, it doesn\'t sho

Answer 1

You should map the extension to the ASP.NET's System.Web.HttpForbiddenHandler class in web.config. If you are using IIS6, before you could do that, you should have mapped the extension to ASP.NET ISAPI handler.

IIS7 Integrated Mode:

IIS7 Classic Mode. Something like:

IIS6 (after mapping the handler to aspnet_isapi.dll in IIS6 configuration):