Default web.config Changes

<?xml version="1.0" encoding="UTF-8"?>

<configuration>

<system.web>

<customErrors mode="RemoteOnly">

</customErrors>

<httpCookies httpOnlyCookies="true" requireSSL="true" />

</system.web>

<system.webServer>

<httpProtocol>

<customHeaders>

<remove name="X-Powered-By" />

<add name="Content-Security-Policy" value="default-src 'self' 'unsafe-inline' 'unsafe-eval'; img-src 'self' data:" />

<add name="Permissions-Policy" value="accelerometer=(), autoplay=(), bluetooth=(), camera=(), captured-surface-control=(), ch-ua-high-entropy-values=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), cross-origin-isolated=(), deferred-fetch=(), deferred-fetch-minimal=(), display-capture=(), encrypted-media=(), fullscreen=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), identity-credentials-get=(), idle-detection=(), interest-cohort=(), language-detector=(), local-fonts=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), on-device-speech-recognition=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), private-state-token-redemption=(), publickey-credentials-create=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), storage-access=(), summarizer=(), sync-xhr=(self), translator=(), unload=(self), usb=(), web-share=(), window-management=(), xr-spatial-tracking=()" />

<add name="Referrer-Policy" value="no-referrer" />

<add name="X-Frame-Options" value="SAMEORIGIN" />

<add name="X-Content-Type-Options" value="nosniff" />

</customHeaders>

</httpProtocol>

<security>

<requestFiltering>

<verbs>

<add verb="OPTIONS" allowed="false" />

</verbs>

</requestFiltering>

</security>

<rewrite>

<outboundRules>

<rule name="Response Server">

<match serverVariable="RESPONSE_SERVER" pattern=".+" />

<action type="Rewrite" />

</rule>

<rule name="X-Powered">

<match serverVariable="RESPONSE_X-POWERED-BY" pattern=".+" />

<action type="Rewrite" />

</rule>

<rule name="x-ASPNet">

<match serverVariable="RESPONSE_X-ASPNET-VERSION" pattern=".+" />

<action type="Rewrite" />

</rule>

</outboundRules>

</rewrite>

</system.webServer>

</configuration>