Repository navigation
Expand file tree
/
Copy pathWeb.config
More file actions
132 lines (131 loc) · 8.56 KB
/
Copy pathWeb.config
File metadata and controls
132 lines (131 loc) · 8.56 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
<?xml version="1.0" encoding="utf-8"?>
<!--
For more information on how to configure your ASP.NET application, please visit
http://go.microsoft.com/fwlink/?LinkId=301880
-->
<configuration>
<appSettings>
<add key="webpages:Version" value="3.0.0.0"/>
<add key="webpages:Enabled" value="true"/>
<add key="ClientValidationEnabled" value="true"/>
<add key="UnobtrusiveJavaScriptEnabled" value="true"/>
</appSettings>
<!--
For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
The following attributes can be set on the <httpRuntime> tag.
<system.Web>
<httpRuntime targetFramework="4.6.2" />
</system.Web>
-->
<system.web>
<compilation debug="true" targetFramework="4.6.2"/>
<customErrors mode="Off"/>
<httpRuntime maxRequestLength="2073741824" executionTimeout="3600" targetFramework="4.6.2"/>
<httpModules/>
<globalization fileEncoding="utf-8"/>
</system.web>
<runtime>
<assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
<dependentAssembly>
<assemblyIdentity name="Newtonsoft.Json" culture="neutral" publicKeyToken="30ad4fe6b2a6aeed"/>
<bindingRedirect oldVersion="0.0.0.0-13.0.0.0" newVersion="13.0.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Optimization" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="1.1.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="WebGrease" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-1.6.5135.21930" newVersion="1.6.5135.21930"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Helpers" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.WebPages" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="System.Web.Mvc" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-5.2.9.0" newVersion="5.2.9.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Syncfusion.Licensing" culture="neutral" publicKeyToken="632609b4d040f6b4"/>
<bindingRedirect oldVersion="16.2450.0.39-18.1450.0.44" newVersion="18.1450.0.39"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Syncfusion.Compression.Base" culture="neutral" publicKeyToken="3d67ed1f87d44c89"/>
<bindingRedirect oldVersion="16.2450.0.39-18.1450.0.44" newVersion="18.1450.0.39"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Microsoft.Owin.Security" publicKeyToken="31bf3856ad364e35"/>
<bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0"/>
</dependentAssembly>
<dependentAssembly>
<assemblyIdentity name="Syncfusion.Pdf.Base" publicKeyToken="3d67ed1f87d44c89"/>
<bindingRedirect oldVersion="0.0.0.0-16.4450.0.1" newVersion="20.3450.1.1"/>
</dependentAssembly>
</assemblyBinding>
</runtime>
<system.webServer>
<validation validateIntegratedModeConfiguration="false"/>
<modules/>
<handlers>
<add name="SitemapXml" path="sitemap.xml" verb="GET" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0"/>
</handlers>
<security>
<requestFiltering>
<requestLimits maxAllowedContentLength="1073741824" maxQueryString="65535"/>
<fileExtensions allowUnlisted="true">
<remove fileExtension="."/>
<add fileExtension="." allowed="true"/>
<remove fileExtension=".cs"/>
<add fileExtension=".cs" allowed="true"/>
<remove fileExtension=".cshtml"/>
<add fileExtension=".cshtml" allowed="true"/>
</fileExtensions>
</requestFiltering>
</security>
<staticContent>
<remove fileExtension=".cs"/>
<mimeMap fileExtension=".cs" mimeType="text/plain"/>
<remove fileExtension=".cshtml"/>
<mimeMap fileExtension=".cshtml" mimeType="text/html"/>
<remove fileExtension=".json"/>
<mimeMap fileExtension=".json" mimeType="application/json"/>
<remove fileExtension=".wasm" />
<mimeMap fileExtension=".wasm" mimeType="application/wasm" />
<remove fileExtension=".md" />
<mimeMap fileExtension=".md" mimeType="text/markdown" />
</staticContent>
<!-- Configure the "Access-Control-Allow-Origin" HTTP header to a more restrictive set of domains -->
<!-- Configure the "X-Frame-Options" HTTP header response to protect against 'ClickJacking' attacks -->
<httpProtocol>
<customHeaders>
<add name="Access-Control-Allow-Origin" value="https://ej2.syncfusion.com" />
<add name="Content-Security-Policy" value="default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://scripts.clarity.ms https://ej2aspnetmvc-prod.azurewebsites.net https://cdn.syncfusion.com https://ej2.syncfusion.com https://www.googletagmanager.com https://googleads.g.doubleclick.net https://www.youtube.com https://www.clarity.ms/ https://www.google-analytics.com https://bat.bing.com https://cdnjs.cloudflare.com https://static.cloudflareinsights.com https://snap.licdn.com blob:;
style-src 'self' 'unsafe-inline' blob: data: https://ej2aspnetmvc-prod.azurewebsites.net https://fonts.googleapis.com https://cdn.syncfusion.com https://ej2.syncfusion.com;
img-src 'self' 'unsafe-inline' blob: data: https://ej2aspnetmvc-prod.azurewebsites.net https://cdn.syncfusion.com https://syncfusion.atlassian.net https://ej2.syncfusion.com https://tile.openstreetmap.org https://www.topuniversities.com https://www.googletagmanager.com https://www.google.com https://physical-service.syncfusion.com https://azure-service.syncfusion.com https://*.clarity.ms/ https://c.bing.com https://www.google.co.in https://ej2-azure-aspcore-service.azurewebsites.net https://amazons3.azurewebsites.net https://ej2-ibm-cos-node-file-provider.azurewebsites.net https://ej2services.syncfusion.com https://services.syncfusion.com https://c.clarity.ms https://px.ads.linkedin.com https://www.google.com https://bat.bing.com;
media-src 'self' 'unsafe-inline' blob: data: https://cdn.syncfusion.com https://ej2services.syncfusion.com https://services.syncfusion.com; connect-src 'self' ws: data: https://ej2aspnetmvc-prod.azurewebsites.net https://tile.openstreetmap.org https://generativelanguage.googleapis.com https://api.deepseek.com https://aspnetmvc.syncfusion.com https://ej2services.syncfusion.com https://services.syncfusion.com https://cdn.syncfusion.com https://bi.syncfusion.com https://ej2.syncfusion.com https://googleads.g.doubleclick.net https://www.google-analytics.com/ https://www.googleapis.com https://*.clarity.ms/ https://services.odata.org https://ej2-aspcore-service.azurewebsites.net https://physical-service.syncfusion.com https://azure-service.syncfusion.com https://ej2-azure-aspcore-service.azurewebsites.net https://ej2-nodejs-service.azurewebsites.net https://amazons3.azurewebsites.net https://realtime-firebase.azurewebsites.net https://z.clarity.ms http://localhost:* https://px.ads.linkedin.com https://www.google.com;
font-src 'self' data: https://fonts.gstatic.com;
form-action 'self' https://ej2-aspcore-service.azurewebsites.net https://physical-service.syncfusion.com https://azure-service.syncfusion.com https://ej2-azure-aspcore-service.azurewebsites.net https://amazons3.azurewebsites.net https://ej2-ibm-cos-node-file-provider.azurewebsites.net;
frame-ancestors 'self' https://www.syncfusion.com/; frame-src 'self' https://boldpdftools.com https://www.googletagmanager.com https://www.youtube.com;" />
<add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains" />
<add name="X-Content-Type-Options" value="nosniff" />
<remove name="X-Powered-By" />
</customHeaders>
</httpProtocol>
</system.webServer>
<system.web.extensions>
<scripting>
<webServices>
<jsonSerialization maxJsonLength="2147483647"/>
</webServices>
</scripting>
</system.web.extensions>
</configuration>