You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Validate all locals of machineKey decryptionKey have been remediated
Do a robust search to determine no literal keys remain.
use this regex for the search: \b(validation|decryption)Key\s*=\s*\"[A-Fa-f0-9]{2}
This should eliminate false positives like <machineKey decryptionKey="AutoGenerate,IsolateApps" />. Such false positives seem to be fairly prevalent and would pollute a simple <machineKey substring search.
The text was updated successfully, but these errors were encountered:
Once #34365 is closed:
use this regex for the search:
\b(validation|decryption)Key\s*=\s*\"[A-Fa-f0-9]{2}
This should eliminate false positives like
<machineKey decryptionKey="AutoGenerate,IsolateApps" />
. Such false positives seem to be fairly prevalent and would pollute a simple<machineKey
substring search.The text was updated successfully, but these errors were encountered: