From 06668807863d9adc769fdf75b99e23d0077f5b40 Mon Sep 17 00:00:00 2001
From: Taras Machyshyn <taras@espocrm.com>
Date: Wed, 19 Oct 2022 13:18:45 +0300
Subject: [PATCH] IIS web.config fixes

---
 public/api/v1/portal-access/web.config | 15 --------
 public/api/v1/web.config               | 13 -------
 public/portal/web.config               | 13 -------
 public/web.config                      | 42 ++++++++++++++++++++
 web.config                             | 53 --------------------------
 5 files changed, 42 insertions(+), 94 deletions(-)
 delete mode 100644 public/api/v1/portal-access/web.config
 delete mode 100644 public/api/v1/web.config
 delete mode 100644 public/portal/web.config
 create mode 100644 public/web.config
 delete mode 100644 web.config

diff --git a/public/api/v1/portal-access/web.config b/public/api/v1/portal-access/web.config
deleted file mode 100644
index fdb78a345f..0000000000
--- a/public/api/v1/portal-access/web.config
+++ /dev/null
@@ -1,15 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<configuration>
-
-    <system.webServer>
-        <rewrite>
-            <rules>
-                <rule name="rule 1G" stopProcessing="true">
-                    <match url="^" />
-                    <action type="Rewrite" url="index.php" appendQueryString="true" />
-                </rule>
-            </rules>
-        </rewrite>
-    </system.webServer>
-
-</configuration>
diff --git a/public/api/v1/web.config b/public/api/v1/web.config
deleted file mode 100644
index 47451f72da..0000000000
--- a/public/api/v1/web.config
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<configuration>
-    <system.webServer>
-        <rewrite>
-            <rules>
-                <rule name="rule 1G" stopProcessing="true">
-                    <match url="^"  />
-                    <action type="Rewrite" url="index.php"  appendQueryString="true" />
-                </rule>
-            </rules>
-        </rewrite>
-    </system.webServer>
-</configuration>
diff --git a/public/portal/web.config b/public/portal/web.config
deleted file mode 100644
index 16d39beeb1..0000000000
--- a/public/portal/web.config
+++ /dev/null
@@ -1,13 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<configuration>
-    <system.webServer>
-        <rewrite>
-            <rules>
-                <rule name="rule 1G" stopProcessing="true">
-                    <match url="^" />
-                    <action type="Rewrite" url="index.php" appendQueryString="true" />
-                </rule>
-            </rules>
-        </rewrite>
-    </system.webServer>
-</configuration>
diff --git a/public/web.config b/public/web.config
new file mode 100644
index 0000000000..e2fe6a88f3
--- /dev/null
+++ b/public/web.config
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<configuration>
+    <system.webServer>
+        <defaultDocument>
+            <files>
+                <clear />
+                <add value="index.php" />
+                <add value="index.html" />
+            </files>
+        </defaultDocument>
+        <security>
+            <requestFiltering>
+                <verbs allowUnlisted="false">
+                    <add verb="GET" allowed="true" />
+                    <add verb="POST" allowed="true" />
+                    <add verb="PUT" allowed="true" />
+                    <add verb="PATCH" allowed="true" />
+                    <add verb="DELETE" allowed="true" />
+                </verbs>
+            </requestFiltering>
+        </security>
+        <rewrite>
+            <rules>
+                <rule name="rule 1G" stopProcessing="true">
+                    <match url="^api/v1/portal-access/(.*)$" />
+                    <action type="Rewrite" url="api/v1/portal-access/index.php" appendQueryString="true" />
+                </rule>
+                <rule name="rule 2G" stopProcessing="true">
+                    <match url="^api/v1/(.*)$" />
+                    <action type="Rewrite" url="api/v1/index.php" appendQueryString="true" />
+                </rule>
+                <rule name="rule 3G" stopProcessing="true">
+                    <match url="^portal/(.*)$" />
+                    <action type="Rewrite" url="portal/index.php" appendQueryString="true" />
+                </rule>
+            </rules>
+        </rewrite>
+        <staticContent>
+            <mimeMap fileExtension=".tpl" mimeType="text/plain" />
+        </staticContent>
+    </system.webServer>
+</configuration>
diff --git a/web.config b/web.config
deleted file mode 100644
index 4b1e1a0d9f..0000000000
--- a/web.config
+++ /dev/null
@@ -1,53 +0,0 @@
-<?xml version="1.0" encoding="UTF-8"?>
-<configuration>
-
-    <system.webServer>
-        <rewrite>
-            <rules>
-                <rule name="RequestBlocking1" stopProcessing="true">
-                    <match url="^/?data/config\.php$" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-                <rule name="RequestBlocking2" stopProcessing="true">
-                    <match url="^/?data/logs/" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-                <rule name="RequestBlocking3" stopProcessing="true">
-                    <match url="^/?data/cache/" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-                <rule name="RequestBlocking4" stopProcessing="true">
-                    <match url="^/?data/upload/" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-                <rule name="RequestBlocking5" stopProcessing="true">
-                    <match url="^/?application/" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-                <rule name="RequestBlocking6" stopProcessing="true">
-                    <match url="^/?custom/" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-                <rule name="RequestBlocking7" stopProcessing="true">
-                    <match url="^/?vendor/" />
-                    <action type="CustomResponse" statusCode="403" statusReason="Forbidden: Access is denied." />
-                </rule>
-            </rules>
-        </rewrite>
-
-        <defaultDocument>
-            <files>
-                <clear />
-                <add value="index.php" />
-                <add value="index.html" />
-            </files>
-        </defaultDocument>
-
-        <staticContent>
-             <mimeMap fileExtension=".tpl" mimeType="text/plain" />
-             <mimeMap fileExtension=".json" mimeType="application/json" />
-             <mimeMap fileExtension=".woff" mimeType="application/font-woff" />
-        </staticContent>
-    </system.webServer>
-
-</configuration>
\ No newline at end of file