I had developed Generic blacklist and whitelist filter that reduces XSS/SQLi risks for ASP applications. I used C#, .NET 3.5
So, I built it as dll, signed, added to GAC and can use it in a single website, by inserting in web.config
<httpModules>
<add name="RequestScanner" type="IISRequestScanner.RequestScanner, IISRequestScanner, Version=1.0.0.0, Culture=neutral, PublicKeyToken=4a629be8f1e2f2c9"/>
</httpModules>
But I want to use this module for all sites, so it should be integrated to IIS. I tried to add it to IIS as managed module, via mappers, no results? Any ideas?
How about changing the machine.config file instead of the web.config. The file can be found at <windows>\Microsoft.NET\Framework\\config\machine.config
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With