Recommended settings for ASP.NET MVC 3

[dcroft]

Can anyone recommend the "strongest" settings for ASP.NET MVC 3 apps? I'm also using NInject for DI.

I'm finding it difficult to get settings that work unless I back most of the stuff off.

[james.billings]

Thanks for your post.

I'm not aware of any recommended set of settings unfortunately - it depends rather a lot on the specifics of your application. In general, anything that gets loaded / referenced via reflection will probably need excluding from obfuscation. You can target specific namespaces/classes/methods for exclusion using custom attributes, as described here.