ASP.NET Core - are files put in the Shared folder under Pages (where the Razor pages reside) publicly accessible?

Question

Are files put into the Pages/Shared folder public to the whole WWW if the website is hosted publicly? I am asking since I want to implement a partial view load thru a controller and want to know whether it's secure.

I am using ASP.NET Core version 6 if that matters.

score 1 · Accepted Answer · answered Oct 23 '21 at 09:24

1

By default, no. Those are files used to render pages on server side. If you will not modify the configuration of where from static files are hosted or the IIS setup (open directory browser feature) you should be secure.

answered Oct 23 '21 at 09:24

Bartosz Rosa

337
1
6

Does this apply to the default settings of Azure Web Apps too? – Munchkin Oct 23 '21 at 11:24
As far as I know ASP.NET Core apps behave the same on Azure Web Apps and on premise. – Bartosz Rosa Oct 23 '21 at 11:40
I mean the IIS settings on the Azure Web App – Munchkin Oct 23 '21 at 11:41
Yes. It is the same on IIS Azure Web Apps. – Bartosz Rosa Oct 23 '21 at 11:46

ASP.NET Core - are files put in the Shared folder under Pages (where the Razor pages reside) publicly accessible?

1 Answers1