#dotnet

Exposed Files

appsettings.json & secrets.json: the .NET secrets you did not mean to ship

In .NET apps, configuration lives in JSON files that can hold connection strings and keys. When one ends up in a public path, it is a plain URL away.