Using the scanner at https://asafaweb.com/ I notice that elmah was still accessible under a subfolder.
The root of my application redirects to a culturecode /nl-be.
The scanner detected that /nl-be/elmah is accessible, although IgnoreDefaultRoute is on and /elmah itself is not accessible.
Using the scanner at https://asafaweb.com/ I notice that elmah was still accessible under a subfolder.
The root of my application redirects to a culturecode
/nl-be
. The scanner detected that/nl-be/elmah
is accessible, althoughIgnoreDefaultRoute
is on and/elmah
itself is not accessible.