How we can close webresource.axd and scriptresource.axd vulnerability in asp.net.?

Question

We have tried below code in web.config

 <customErrors mode="On" redirectMode="ResponseRewrite" defaultRedirect="~/error.aspx" />

Answer 1

in your web.config, at the bottom just before the closing configuration tag put the following:

<location path="WebResource.axd">
    <system.web>
      <authorization>
        <deny users="*"/>
      </authorization>
    </system.web>
</location>

<location path="ScriptResource.axd">
    <system.web>
      <authorization>
        <deny users="*"/>
      </authorization>
    </system.web>
</location>