title: Configuring Static Analysis to Detect insecure MVC Routes
body: <p>I want to create a static analysis code rule such that any controller's method must either inherit AllowAnonymous OR Authorize, or have an explicit AllowAnonymous OR Authorize attribute - so that every action has been addressed explicitly one way or the other.</p>
  
  <p>Any guidance on how to do this - OR if you see a better solution - would be appreciated.</p>