How to disable Windows Scripting Host for ASP.Net websites
how can I disable WSH so no reference to the object can be made from ASP.NET-websites?
I have already tried:
- to change the ACL on c:\winnt\system\cscript.exe and wscript.exe so access for user ASPNET is denied
- to rename cscript.Exe and wscript.exe (but these files are automatically restored)
I don't want to disables WSH on the system (i need it for scripting purpose myself), but I should not be usable from websites of customers?