Skip to content

Instantly share code, notes, and snippets.

@ediblecode
Created November 18, 2018 21:12
Show Gist options
  • Save ediblecode/55579db27ab665cc3f80924500d7ff37 to your computer and use it in GitHub Desktop.
Save ediblecode/55579db27ab665cc3f80924500d7ff37 to your computer and use it in GitHub Desktop.
Default custom headers for web.config in IIS - Edge compat and XSS protection and remove X-Powered-By
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.webServer>
<httpProtocol>
<customHeaders>
<remove name="X-Powered-By" />
<add name="X-UA-Compatible" value="IE=edge,chrome=1" />
<add name="X-XSS-Protection" value="1; mode=block" />
</customHeaders>
</httpProtocol>
</system.webServer>
</configuration>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment