asp.net mvc 安全測試漏洞 " HTTP 動詞篡改的認證旁路" 問題解決

IBM Security Appscan漏洞篩查-HTTP 動詞篡改的認證旁路漏洞，具體解決方案:

在Web.Config中system.webServer節點增長配置security:

1. <security>
2.    <requestFiltering>
3.      <verbs allowUnlisted="false">
4.        <add verb="GET" allowed="true" />
5.        <add verb="POST" allowed="true" />
6.      </verbs>
7.    </requestFiltering>
8.  </security>