-
Notifications
You must be signed in to change notification settings - Fork 29
/
Copy pathWeb.config
130 lines (129 loc) · 7.73 KB
/
Web.config
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
<?xml version="1.0" encoding="utf-8"?>
<!--
For more information on how to configure your ASP.NET application, please visit
http://go.microsoft.com/fwlink/?LinkId=301880
-->
<configuration>
<appSettings>
<add key="webpages:Version" value="3.0.0.0"/>
<add key="webpages:Enabled" value="true"/>
<add key="ClientValidationEnabled" value="true"/>
<add key="UnobtrusiveJavaScriptEnabled" value="true"/>
</appSettings>
<!--
For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
The following attributes can be set on the <httpRuntime> tag.
<system.Web>
<httpRuntime targetFramework="4.6.2" />
</system.Web>
-->
<system.web>
<compilation debug="true" targetFramework="4.6.2"/>
<customErrors mode="Off"/>
<httpRuntime maxRequestLength="2073741824" executionTimeout="3600" targetFramework="4.6.2"/>
<httpModules/>
<globalization fileEncoding="utf-8"/>
</system.web>
<runtime>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="Newtonsoft.Json" culture="neutral" publicKeyToken="30ad4fe6b2a6aeed"/>
<bindingRedirect oldVersion="0.0.0.0-13.0.0.0" newVersion="13.0.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Optimization" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="1.1.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="WebGrease" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-1.6.5135.21930" newVersion="1.6.5135.21930"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Helpers" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.WebPages" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Mvc" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-5.2.9.0" newVersion="5.2.9.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Syncfusion.Licensing" culture="neutral" publicKeyToken="632609b4d040f6b4"/>
<bindingRedirect oldVersion="16.2450.0.39-18.1450.0.44" newVersion="18.1450.0.39"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Syncfusion.Compression.Base" culture="neutral" publicKeyToken="3d67ed1f87d44c89"/>
<bindingRedirect oldVersion="16.2450.0.39-18.1450.0.44" newVersion="18.1450.0.39"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin.Security" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Syncfusion.Pdf.Base" publicKeyToken="3d67ed1f87d44c89"/>
<bindingRedirect oldVersion="0.0.0.0-16.4450.0.1" newVersion="20.3450.1.1"/>
</dependentAssembly>
</assemblyBinding>
</runtime>
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
<modules/>
<handlers>
<add name="SitemapXml" path="sitemap.xml" verb="GET" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0"/>
</handlers>
<security>
<requestFiltering>
<requestLimits maxAllowedContentLength="1073741824" maxQueryString="65535"/>
<fileExtensions allowUnlisted="true">
<remove fileExtension="."/>
<add fileExtension="." allowed="true"/>
<remove fileExtension=".cs"/>
<add fileExtension=".cs" allowed="true"/>
<remove fileExtension=".cshtml"/>
<add fileExtension=".cshtml" allowed="true"/>
</fileExtensions>
</requestFiltering>
</security>
<staticContent>
<remove fileExtension=".cs"/>
<mimeMap fileExtension=".cs" mimeType="text/plain"/>
<remove fileExtension=".cshtml"/>
<mimeMap fileExtension=".cshtml" mimeType="text/html"/>
<remove fileExtension=".json"/>
<mimeMap fileExtension=".json" mimeType="application/json"/>
<remove fileExtension=".wasm" />
<mimeMap fileExtension=".wasm" mimeType="application/wasm" />
</staticContent>
<!-- Configure the "Access-Control-Allow-Origin" HTTP header to a more restrictive set of domains -->
<!-- Configure the "X-Frame-Options" HTTP header response to protect against 'ClickJacking' attacks -->
<httpProtocol>
<customHeaders>
<add name="Access-Control-Allow-Origin" value="https://ej2.syncfusion.com" />
<add name="Content-Security-Policy" value="default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ej2aspnetcore.azurewebsites.net https://cdn.syncfusion.com https://ej2.syncfusion.com https://www.googletagmanager.com https://www.youtube.com https://www.clarity.ms/ https://www.google-analytics.com https://cdnjs.cloudflare.com blob:;
style-src 'self' 'unsafe-inline' data: https://ej2aspnetcore.azurewebsites.net https://fonts.googleapis.com https://cdn.syncfusion.com https://ej2.syncfusion.com;
img-src 'self' 'unsafe-inline' blob: data: https://ej2aspnetcore.azurewebsites.net https://cdn.syncfusion.com https://ej2.syncfusion.com https://tile.openstreetmap.org https://www.topuniversities.com https://www.googletagmanager.com https://ej2-aspcore-service.azurewebsites.net https://*.clarity.ms/ https://c.bing.com https://www.google.co.in https://ej2-azure-aspcore-service.azurewebsites.net https://amazons3.azurewebsites.net https://ej2-ibm-cos-node-file-provider.azurewebsites.net https://ej2services.syncfusion.com https://services.syncfusion.com https://c.clarity.ms;
media-src 'self' 'unsafe-inline' blob: data: https://cdn.syncfusion.com; connect-src 'self' ws: data: https://aspnetmvc.syncfusion.com https://ej2aspnetcore.azurewebsites.net https://ej2services.syncfusion.com https://services.syncfusion.com https://cdn.syncfusion.com https://bi.syncfusion.com https://ej2.syncfusion.com https://www.google-analytics.com/ https://www.googleapis.com https://*.clarity.ms/ https://services.odata.org https://ej2-aspcore-service.azurewebsites.net https://ej2-azure-aspcore-service.azurewebsites.net https://ej2-nodejs-service.azurewebsites.net https://amazons3.azurewebsites.net https://realtime-firebase.azurewebsites.net https://z.clarity.ms http://localhost:*;
font-src 'self' data: https://fonts.gstatic.com;
form-action 'self' https://ej2-aspcore-service.azurewebsites.net https://ej2-azure-aspcore-service.azurewebsites.net https://amazons3.azurewebsites.net https://ej2-ibm-cos-node-file-provider.azurewebsites.net;
frame-ancestors 'self' https://www.syncfusion.com/; frame-src 'self' https://boldpdftools.com https://www.youtube.com;" />
<add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains" />
<add name="X-Content-Type-Options" value="nosniff" />
<remove name="X-Powered-By" />
</customHeaders>
</httpProtocol>
</system.webServer>
<system.web.extensions>
<scripting>
<webServices>
<jsonSerialization maxJsonLength="2147483647"/>
</webServices>
</scripting>
</system.web.extensions>
</configuration>