Developer forum

Forum » CMS - Standard features » Recommended security setting

Recommended security setting

Imar Spaanjaars Dynamicweb Employee
Imar Spaanjaars
Reply

Hi there,

Under Monitoring | Health | Security settings there's a recommendation to turn off throwing exceptions and instead return the Razor error:

 

That sounds like a bad recommendation as a) it exposes full Razor code and b) it makes the page look really bad when an error occurs. Isn't it much safer and better for the user to turn on exceptions *and* display a generic error message when an exception occurs like this:

Imar


Replies

 
Nicolai Pedersen Dynamicweb Employee
Nicolai Pedersen
Reply
This post has been marked as an answer

Yes - you are right!

Votes for this answer: 1
 
Imar Spaanjaars Dynamicweb Employee
Imar Spaanjaars
Reply

Great, thanks for confirming.

Imar

 

You must be logged in to post in the forum