I have an internal ASP .Net application that requests data by pressing a button on the form. When the button is pressed it sends a https request which contains some sensitive info and receives a response. Its hosted on IIS.
My question is, can a standard user (as in not an administrator) be able to find any of the sensitive data sent or request data in any other fashion (assuming they do not know the URL)?
The data sent must remain unviewable to any user.
Thanks
...
Go to the complete details ...