I am uploading the EICAR test file to our web server.  When the file gets written to the disk the virus scanner deletes it (as it should).  The upload control then has an issue finding the file and reports an error.  The problem is that too much info is being passed back to the client and our Threat Risk Assessment auditor is telling us to restrict the amount of info returned.  How do I restrict the info passed back?  Here is an example of the return:

 HTTP/1.1 200 OK

Cache-Control: private

X-Powered-By: ASP.NET

Date: Tue, 24 May 2016 14:04:02 GMT

Content-Length: 983

Error:System.IO.FileNotFoundException: Could not find file 'C:\Program Files\xyz\Uploads\uploading.4ee754ec-6751-478b-899b-a0c183b146ee.virus.txt.resx'.

File name: 'C:\Program Files\xyz\Uploads\uploading.4ee754ec-6751-478b-899b-a0c183b146ee.virus.txt.resx'

   at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)

   at System.IO.FileStream.Init(String path, FileMode mode, FileAccess access, Int32 rights, Boolean useRights, FileShare share, Int32 bufferSize, FileOptions options, SECURITY_ATTRIBUTES secAttrs, String msgPath, Boolean bFromProxy, Boolean useLongPath, Boolean checkHost)

   at System.IO.FileStream..ctor(String path, FileMode mode, FileAccess access, FileShare share, Int32 bufferSize, FileOptions options)

   at CuteWebUI.c.g(String A_0)

   at CuteWebUI.UploaderFileSystemProvider.Save(Guid guid, String filename, Stream inputStream)

   at CuteWebUI.UploadModule.a(HttpContext A_0, Guid A_1)

hi,

have no way to prevent  it for now, this is how the uploader control work, if we limit this, that means the uploader control has no way to work, sorry for your inconvenience.

Regards,

Ken 

Hi Ken,

If you do are not able to come up with a method of preventing the stack trace and the physical folder info  from being returned to the client it means that it keeps our software from passing a Threat Risk Assessment.  This will prevent other people from buying your software and will likely mean that we have to take our business elsewhere.