Home/ Questions/Q 6178115
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-24T00:24:27+00:00

There is a warning in the @Page directive regarding the EnableViewStateMac setting found here

  • 0

There is a warning in the @Page directive regarding the EnableViewStateMac setting found here that states:

“Security Note This attribute should never be set to false in a production Web site.”

This warning seems unconditional, regardless of the Page ViewState setting (true or false). Does this warning apply to @Pages that have EnableViewState set to false? If the warning does apply in this case, why, when ViewState is turned completely off for the page and its child controls, is this a concern?

Upgate: The warning seems to apply, being that some doofus could drop a control that uses Control State on to a page that has ViewState = false AND ViewStateMac = false.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If there’s no viewstate there’s no harm in leaving it on … and, remember, there are cases where, despite your best attempts viewstate may sneak in, under the guise of control state, so the warning still applies.

    • 0