Hi all,

Is there any guidelines to good security in umbraco ?

I am thinking in terms of access to xslt-files and such.

If I do a:

http://www.umbraco.org/documentation/books/hide-debugging-features-for-production-systems?
umbDebugShowTrace=True

or a:

http://www.umbraco.org/documentation/books/hide-debugging-features-for-production-systems?umbDebug=True

I get all the information on macro-names, and from there I can go to the xslt-folder:

http://www.umbraco.org/xslt/BookInfo.xslt

Couldn't this potentially be used to sniff out information about my backend, at least if I had made a backend, that exposed critical information?


--
Best regards
Neskire