{"action":"created","issue":{"url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80","repository_url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate","labels_url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80/labels{/name}","comments_url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80/comments","events_url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80/events","html_url":"https://github.com/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80","id":142004091,"number":80,"title":"Consolidate all security settings into web.confg","user":{"login":"sergy79","id":15961986,"avatar_url":"https://avatars.githubusercontent.com/u/15961986?v=3","gravatar_id":"","url":"https://api.github.com/users/sergy79","html_url":"https://github.com/sergy79","followers_url":"https://api.github.com/users/sergy79/followers","following_url":"https://api.github.com/users/sergy79/following{/other_user}","gists_url":"https://api.github.com/users/sergy79/gists{/gist_id}","starred_url":"https://api.github.com/users/sergy79/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sergy79/subscriptions","organizations_url":"https://api.github.com/users/sergy79/orgs","repos_url":"https://api.github.com/users/sergy79/repos","events_url":"https://api.github.com/users/sergy79/events{/privacy}","received_events_url":"https://api.github.com/users/sergy79/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2016-03-18T23:54:41Z","updated_at":"2016-03-21T08:40:01Z","closed_at":null,"body":"Hello, I recently noticed the current template ASP MVC 4.6 version has a lot of scattered security settings across the template. **Which makes it very easy to miss**, and it happened to us for the longest time over nuget updates, where it slipped into the production site.\r\n\r\nSo, in keeping with configuration _over_ convention keeping the settings, I want to recommend consolidating the security settings into the web.config. At the same time I would be interested in hearing out your thoughts on why it be better to put some of those in the code itself.\r\n\r\nThanks\r\nSergy"},"comment":{"url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/comments/199176885","html_url":"https://github.com/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80#issuecomment-199176885","issue_url":"https://api.github.com/repos/RehanSaeed/ASP.NET-MVC-Boilerplate/issues/80","id":199176885,"user":{"login":"RehanSaeed","id":2270364,"avatar_url":"https://avatars.githubusercontent.com/u/2270364?v=3","gravatar_id":"","url":"https://api.github.com/users/RehanSaeed","html_url":"https://github.com/RehanSaeed","followers_url":"https://api.github.com/users/RehanSaeed/followers","following_url":"https://api.github.com/users/RehanSaeed/following{/other_user}","gists_url":"https://api.github.com/users/RehanSaeed/gists{/gist_id}","starred_url":"https://api.github.com/users/RehanSaeed/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RehanSaeed/subscriptions","organizations_url":"https://api.github.com/users/RehanSaeed/orgs","repos_url":"https://api.github.com/users/RehanSaeed/repos","events_url":"https://api.github.com/users/RehanSaeed/events{/privacy}","received_events_url":"https://api.github.com/users/RehanSaeed/received_events","type":"User","site_admin":false},"created_at":"2016-03-21T08:40:01Z","updated_at":"2016-03-21T08:40:01Z","body":"It would be nice to do but unfortunately security is really really hard and I think if I did something like that it might not be very configurable (Sometimes you just need to write some code instead of using config)."}}