[Mono-devel-list] Mono not obeying to customErrors="On" ?

[Gabriel Baños]

Oliver,

To prevent remote clients from getting detailed error messages, you can set
customErrors mode to "RemoteOnly" or "On" and specify a default error page
to which your clients will be redirected in case of unhandled exceptions.
Leaving customErrors mode set to Off won't help.


-----Original Message-----
From: mono-devel-list-admin at lists.ximian.com
[mailto:mono-devel-list-admin at lists.ximian.com] On Behalf Of Oliver
Weichhold
Sent: Sábado, 25 de Septiembre de 2004 08:59 a.m.
To: mono-devel-list at lists.ximian.com
Subject: [Mono-devel-list] Mono not obeying to customErrors="On" ?

Hello

I'm hosting an asp.net application under Mono 1.0.2 and I can't seem to 
be able to supress detailed error messages to remote clients.

customErrors is currently set to "Off" in Web.config (I can post the 
entire file if requested) but it doesn't look as if the setting makes 
any difference at all under Mono. Any help would be appreciated since I 
want to avoid this security risk at all cost.


P.S: Is the really no way to search the entire list archive, except 
downloading the whole thing as text file?

-- 
Oliver Weichhold
Development & Security Consultant
http://www.weichhold.com