.Net 项目安全性问题

http 强制转为https

WebConfig配置

<system.webServer>
    <modules runAllManagedModulesForAllRequests="true"/>
</system.webServer>

Application_Start里面的配置

GlobalFilters.Filters.Add(new RequireHttpsAttribute());

错误跳转链接 webconfig配置

<system.web><customErrorsdefaultRedirect="error.html"mode="RemoteOnly"></customErrors></system.web>

X-AspNet-Version 信息隐藏 

<system.webServer><httpProtocol><customHeaders><removename="X-Powered-By"/><addname="X-Content-Type-Options"value="nosniff"/></customHeaders></httpProtocol></system.webServer>