Removing Sitecore.Glimpse

There are a few approaches that can be applied to secure, disable or remove Glimpse. The following sections will discuss each of these options in turn.

Block access via a Security Policy

Policies dictate what Glimpse is allowed to do to any given request. Policies can be disabled and customised to fit your requirements.

Refer to the Glimpse Policy Management documentation for more information.

Disabling Glimpse without removal

If you wish to leave Glimpse installed in your web application code but want to ensure that it cannot respond to any HTTP requests then you can comment out or remove the two references to the Glimpse.AspNet.HttpModule in the web.config.

<system.webServer>
    <modules>
        <add name="Glimpse" type="Glimpse.AspNet.HttpModule, Glimpse.AspNet" preCondition="integratedMode"/>
        ...
    <modules>
    ...
<system.webServer>
...
<system.web>
    ...
    <httpModules>
        <add name="Glimpse" type="Glimpse.AspNet.HttpModule, Glimpse.AspNet"/>
        ...
    </httpModules>
    ...
</system.web>

Uninstalling Sitecore.Glimpse

To remove just the Sitecore extension to Glimpse run the following command in the Package Manager Console:

    uninstall-package sitecore.glimpse

To then completely remove glimpse from your web application run the following commands:

    uninstall-package glimpse.aspnet
    uninstall-package glimpse

Note: when uninstalling glimpse.aspnet the following line will need to be added back into the <system.webServer> section.

    <validation validateIntegratedModeConfiguration="false" />