umbraco security release 2019 workaround

Press Ctrl / CMD + C to copy this to your clipboard.

Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at

Bobi 280 posts 743 karma points

Mar 20, 2020 @ 18:38
0

Umbraco Security Release 2019 Workaround
Hi, the workaround mentioned at https://umbraco.com/blog/security-advisory-10th-december-2019/ appears to impact the performance of a live server. Can anyone confirm this. The workaround was as follows:

Add a URL Rewrite to web.config:
```
<rewrite>
      <rules>
        <rule name="Block MiniProfiler" stopProcessing="true">
          <match url="^mini-profiler-resources" ignoreCase="true" />
          <action type="AbortRequest" />
        </rule>
      </rules>
</rewrite>
```
Copy Link
Søren Kottal 530 posts 3521 karma points MVP 2x c-trib

Mar 28, 2020 @ 19:22

0

Hi Bobi

How would that impact the peformance? All it does is to abort requests to a specific url.

Copy Link
is working on a reply...

This forum is in read-only mode while we transition to the new forum.

You can continue this topic on the new forum by tapping the "Continue discussion" link below.

Please Sign in or register to post replies