Default web.config Changes

<?xml version="1.0" encoding="UTF-8"?>

<configuration>

<system.web>

<customErrors mode="RemoteOnly">

</customErrors>

</system.web>

<system.webServer>

<httpProtocol>

<customHeaders>

<remove name="X-Powered-By" />

<add name="X-Frame-Options" value="SAMEORIGIN" />

</customHeaders>

</httpProtocol>

<security>

<requestFiltering>

<verbs>

<add verb="OPTIONS" allowed="false" />

</verbs>

</requestFiltering>

</security>

<rewrite>

<outboundRules>

<rule name="Response Server">

<match serverVariable="RESPONSE_SERVER" pattern=".+" />

<action type="Rewrite" />

</rule>

<rule name="X-Powered">

<match serverVariable="RESPONSE_X-POWERED-BY" pattern=".+" />

<action type="Rewrite" />

</rule>

<rule name="x-ASPNet">

<match serverVariable="RESPONSE_X-ASPNET-VERSION" pattern=".+" />

<action type="Rewrite" />

</rule>

</outboundRules>

</rewrite>

</system.webServer>

</configuration>