NuGet/NuGetGallery — pull request #390 by AkosLukacs (2012-01-21 23:17:33+00:00)
Title: Securing elmah.axd for real

Changed web.config so elmah.axd is secure, only available from the root of the application. Check this [article](http://www.troyhunt.com/2012/01/aspnet-session-hijacking-with-google.html) for details on the vulnerability.