My .NET application has a vulnerability of exposing sensitive data after it went through a penetration test. I\'ll use the following simple web-app to illustrate my question.