Improving Web Application Security: Threats and - CGISecurity

Chapter 9: Using Code Access Security with ASP.NET 249 To call multiple Web services from a medium-trust application1. Copy the Web_mediumtrust.config file, which is in the following directory, to afile called Web_mediumtrust_WebService.config, which is located in the samedirectory.%windir%\Microsoft.NET\Framework\{version}\CONFIG2. Locate WebPermission and add a element for each server you will beaccessing, as follows:If you call the Web service using its NetBIOS) name, DNS name, and/or IPaddress, you must have a separate element for each URI as shown in thefollowing example.3. Save the file.4. Update your application’s Web.config file to point to the newly created policy file.This requires that you create a new trust level and map it to the new policy file.Next, configure the element of your application to use the new level.The following fragment shows the necessary additions to Web.config: