In our "vintage" ASP.NET project we configured NWebSec through the web.config file. Now we have a ASP.NET Core subproject where the NWebSec rules from the main project don't seem to bubble down. Also I could not really figure out how to configure NWebSec in a Core project besides using Attributes.
https://docs.nwebsec.com/en/latest/nwebsec/Configuring-csp.html
What I really want is one central place to do the configuration, otherwise I know we will end up with two completely out of sync configs...
I'm not yet a .NET Core expert, but my impression was that the web.config file is not used anymore, otherwise we could do something like that:
Using configSource with NWebsec