How to disable Request Filtering for a specific website on IIS 7.5?
I have Request Filtering enabled in my IIS 7.5 and want to keep it that way, however, one site is basically just a proxy for some internal Java application and I'd like to disable Request Filtering for that site. Is it possible to do that?
Solution 1:
You could enable Request Filtering for the top (server) level, and then just add a <clear />
in the individual sections in the web.config file for the site for which you don't want to use Request Filtering:
<configuration>
<system.webServer>
<security>
<requestFiltering>
<denyUrlSequences>
<clear />
</denyUrlSequences>
<fileExtensions allowUnlisted="true">
<clear />
</fileExtensions>
</requestFiltering>
</security>
</system.webServer>
</configuration>