From 22ef8ffbfe67a63c7cdbdcd7d5cbf197c6b86fed Mon Sep 17 00:00:00 2001
From: Frédéric Buclin <LpSolit@gmail.com>
Date: Sun, 11 Sep 2016 14:02:27 -0400
Subject: Bug 580471 - Ship with a default web.config for IIS installs

---
 web.config | 47 +++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 47 insertions(+)
 create mode 100644 web.config

diff --git a/web.config b/web.config
new file mode 100644
index 000000000..1ebec727b
--- /dev/null
+++ b/web.config
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+    <system.webServer>
+        <defaultDocument>
+            <files>
+                <clear />
+                <add value="index.cgi" />
+            </files>
+        </defaultDocument>
+        <rewrite>
+            <rules>
+                <rule name="REST">
+                    <match url="^rest/(.*)$" />
+                    <action type="Rewrite" url="rest.cgi/{R:1}" />
+                </rule>
+            </rules>
+        </rewrite>
+        <directoryBrowse enabled="false" />
+        <security>
+            <requestFiltering>
+                <fileExtensions allowUnlisted="true">
+                    <add fileExtension=".dot" allowed="false" />
+                    <add fileExtension=".pl" allowed="false" />
+                    <add fileExtension=".pm" allowed="false" />
+                    <add fileExtension=".rst" allowed="false" />
+                    <add fileExtension=".tmpl" allowed="false" />
+                </fileExtensions>
+                <hiddenSegments>
+                    <add segment="localconfig" />
+                    <add segment="params.json" />
+                    <add segment="mailer.testfile" />
+                </hiddenSegments>
+                <denyUrlSequences>
+                    <add sequence="/contrib/" />
+                    <add sequence="/data/attachments/" />
+                    <add sequence="/data/db/" />
+                    <add sequence="/data/mining/" />
+                    <add sequence="/lib/" />
+                    <add sequence="/rst/" />
+                    <add sequence="/template/" />
+                    <add sequence="/t/" />
+                    <add sequence="/xt/" />
+                </denyUrlSequences>
+            </requestFiltering>
+        </security>
+    </system.webServer>
+</configuration>
-- 
cgit v1.2.3-24-g4f1b