Is it safe to store confidential settings in .cs file instead Web.config?
<p>I want to store some confidential values (such as database connection strings, some passwords) in a Setting.cs (and there in a static class) file.</p>

<p>Is it 100% sure, that IIS 7 is not serving this file in plain text?
Or are there any known vulnerabilities? </p>
