Default web.config Changes
<?xml version="1.0" encoding="UTF-8"?>
<configuration>
<system.web>
<customErrors mode="RemoteOnly">
</customErrors>
</system.web>
<system.webServer>
<httpProtocol>
<customHeaders>
<remove name="X-Powered-By" />
<add name="X-Frame-Options" value="SAMEORIGIN" />
</customHeaders>
</httpProtocol>
<security>
<requestFiltering>
<verbs>
<add verb="OPTIONS" allowed="false" />
</verbs>
</requestFiltering>
</security>
<rewrite>
<outboundRules>
<rule name="Response Server">
<match serverVariable="RESPONSE_SERVER" pattern=".+" />
<action type="Rewrite" />
</rule>
<rule name="X-Powered">
<match serverVariable="RESPONSE_X-POWERED-BY" pattern=".+" />
<action type="Rewrite" />
</rule>
<rule name="x-ASPNet">
<match serverVariable="RESPONSE_X-ASPNET-VERSION" pattern=".+" />
<action type="Rewrite" />
</rule>
</outboundRules>
</rewrite>
</system.webServer>
</configuration>