From: Frédéric Buclin <LpSolit@gmail.com>
Date: Sun, 11 Sep 2016 18:02:27 +0000 (-0400)
Subject: Bug 580471 - Ship with a default web.config for IIS installs
X-Git-Tag: release-5.1.2~69
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=22ef8ffbfe67a63c7cdbdcd7d5cbf197c6b86fed;p=thirdparty%2Fbugzilla.git

Bug 580471 - Ship with a default web.config for IIS installs
---

diff --git a/web.config b/web.config
new file mode 100644
index 0000000000..1ebec727b2
--- /dev/null
+++ b/web.config
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+    <system.webServer>
+        <defaultDocument>
+            <files>
+                <clear />
+                <add value="index.cgi" />
+            </files>
+        </defaultDocument>
+        <rewrite>
+            <rules>
+                <rule name="REST">
+                    <match url="^rest/(.*)$" />
+                    <action type="Rewrite" url="rest.cgi/{R:1}" />
+                </rule>
+            </rules>
+        </rewrite>
+        <directoryBrowse enabled="false" />
+        <security>
+            <requestFiltering>
+                <fileExtensions allowUnlisted="true">
+                    <add fileExtension=".dot" allowed="false" />
+                    <add fileExtension=".pl" allowed="false" />
+                    <add fileExtension=".pm" allowed="false" />
+                    <add fileExtension=".rst" allowed="false" />
+                    <add fileExtension=".tmpl" allowed="false" />
+                </fileExtensions>
+                <hiddenSegments>
+                    <add segment="localconfig" />
+                    <add segment="params.json" />
+                    <add segment="mailer.testfile" />
+                </hiddenSegments>
+                <denyUrlSequences>
+                    <add sequence="/contrib/" />
+                    <add sequence="/data/attachments/" />
+                    <add sequence="/data/db/" />
+                    <add sequence="/data/mining/" />
+                    <add sequence="/lib/" />
+                    <add sequence="/rst/" />
+                    <add sequence="/template/" />
+                    <add sequence="/t/" />
+                    <add sequence="/xt/" />
+                </denyUrlSequences>
+            </requestFiltering>
+        </security>
+    </system.webServer>
+</configuration>