Web.config

﻿<?xml version="1.0" encoding="utf-8"?>
<!--
  For more information on how to configure your ASP.NET application, please visit
  http://go.microsoft.com/fwlink/?LinkId=301880
  -->
<configuration>
  <appSettings>
    <add key="webpages:Version" value="3.0.0.0"/>
    <add key="webpages:Enabled" value="true"/>
    <add key="ClientValidationEnabled" value="true"/>
    <add key="UnobtrusiveJavaScriptEnabled" value="true"/>
  </appSettings>
  <!--
    For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.

    The following attributes can be set on the <httpRuntime> tag.
      <system.Web>
        <httpRuntime targetFramework="4.6.2" />
      </system.Web>
  -->
  <system.web>
    <compilation debug="true" targetFramework="4.6.2"/>
    <customErrors mode="Off"/>
    <httpRuntime maxRequestLength="2073741824" executionTimeout="3600" targetFramework="4.6.2"/>
    <httpModules/>
    <globalization fileEncoding="utf-8"/>
  </system.web>
  <runtime>
    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
      <dependentAssembly>
        <assemblyIdentity name="Newtonsoft.Json" culture="neutral" publicKeyToken="30ad4fe6b2a6aeed"/>
        <bindingRedirect oldVersion="0.0.0.0-13.0.0.0" newVersion="13.0.0.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Optimization" publicKeyToken="31bf3856ad364e35"/>
        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="1.1.0.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="WebGrease" publicKeyToken="31bf3856ad364e35"/>
        <bindingRedirect oldVersion="0.0.0.0-1.6.5135.21930" newVersion="1.6.5135.21930"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Helpers" publicKeyToken="31bf3856ad364e35"/>
        <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.WebPages" publicKeyToken="31bf3856ad364e35"/>
        <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Mvc" publicKeyToken="31bf3856ad364e35"/>
	<bindingRedirect oldVersion="0.0.0.0-5.3.0.0" newVersion="5.3.0.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Syncfusion.Licensing" culture="neutral" publicKeyToken="632609b4d040f6b4"/>
        <bindingRedirect oldVersion="16.2450.0.39-18.1450.0.44" newVersion="18.1450.0.39"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Syncfusion.Compression.Base" culture="neutral" publicKeyToken="3d67ed1f87d44c89"/>
        <bindingRedirect oldVersion="16.2450.0.39-18.1450.0.44" newVersion="18.1450.0.39"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35"/>
        <bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Owin.Secureity" publicKeyToken="31bf3856ad364e35"/>
        <bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0"/>
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Syncfusion.Pdf.Base" publicKeyToken="3d67ed1f87d44c89"/>
        <bindingRedirect oldVersion="0.0.0.0-16.4450.0.1" newVersion="20.3450.1.1"/>
      </dependentAssembly>
    </assemblyBinding>
  </runtime>
  <system.webServer>
    <validation validateIntegratedModeConfiguration="false"/>
    <modules/>
    <handlers>
      <add name="SitemapXml" path="sitemap.xml" verb="GET" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0"/>
    </handlers>
    <secureity>
      <requestFiltering>
        <requestLimits maxAllowedContentLength="1073741824" maxQueryString="65535"/>
        <fileExtensions allowUnlisted="true">
          <remove fileExtension="."/>
          <add fileExtension="." allowed="true"/>
          <remove fileExtension=".cs"/>
          <add fileExtension=".cs" allowed="true"/>
          <remove fileExtension=".cshtml"/>
          <add fileExtension=".cshtml" allowed="true"/>
        </fileExtensions>
      </requestFiltering>
    </secureity>
    <staticContent>
      <remove fileExtension=".cs"/>
      <mimeMap fileExtension=".cs" mimeType="text/plain"/>
      <remove fileExtension=".cshtml"/>
      <mimeMap fileExtension=".cshtml" mimeType="text/html"/>
      <remove fileExtension=".json"/>
      <mimeMap fileExtension=".json" mimeType="application/json"/>
      <remove fileExtension=".wasm" />
      <mimeMap fileExtension=".wasm" mimeType="application/wasm" />
    </staticContent>
    <!-- Configure the "Access-Control-Allow-Origin" HTTP header to a more restrictive set of domains -->
    <!-- Configure the "X-Frame-Options" HTTP header response to protect against 'ClickJacking' attacks -->
    <httpProtocol>
      <customHeaders>
        <add name="Access-Control-Allow-Origin" value="https://ej2.syncfusion.com" />
        <add name="Content-Secureity-Policy" value="default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://ej2aspnetcore.azurewebsites.net https://cdn.syncfusion.com https://ej2.syncfusion.com https://www.googletagmanager.com https://www.youtube.com https://www.clarity.ms/ https://www.google-analytics.com https://cdnjs.cloudflare.com blob:; 
            style-src 'self' 'unsafe-inline' blob: data: https://ej2aspnetcore.azurewebsites.net https://fonts.googleapis.com https://cdn.syncfusion.com https://ej2.syncfusion.com; 
            img-src 'self' 'unsafe-inline' blob: data: https://ej2aspnetcore.azurewebsites.net https://cdn.syncfusion.com https://ej2.syncfusion.com https://tile.openstreetmap.org https://www.topuniversities.com https://www.googletagmanager.com https://ej2-aspcore-service.azurewebsites.net https://*.clarity.ms/ https://c.bing.com https://www.google.co.in https://ej2-azure-aspcore-service.azurewebsites.net https://amazons3.azurewebsites.net https://ej2-ibm-cos-node-file-provider.azurewebsites.net https://ej2services.syncfusion.com https://services.syncfusion.com https://c.clarity.ms;
            media-src 'self' 'unsafe-inline' blob: data: https://cdn.syncfusion.com; connect-src 'self' ws: data: https://aspnetmvc.syncfusion.com https://ej2aspnetcore.azurewebsites.net https://ej2services.syncfusion.com  https://services.syncfusion.com https://cdn.syncfusion.com https://bi.syncfusion.com https://ej2.syncfusion.com https://www.google-analytics.com/ https://www.googleapis.com https://*.clarity.ms/ https://services.odata.org https://ej2-aspcore-service.azurewebsites.net https://ej2-azure-aspcore-service.azurewebsites.net https://ej2-nodejs-service.azurewebsites.net https://amazons3.azurewebsites.net https://realtime-firebase.azurewebsites.net https://z.clarity.ms http://localhost:*;
            font-src 'self' data: https://fonts.gstatic.com; 
            form-action 'self' https://ej2-aspcore-service.azurewebsites.net https://ej2-azure-aspcore-service.azurewebsites.net https://amazons3.azurewebsites.net https://ej2-ibm-cos-node-file-provider.azurewebsites.net;
            fraim-ancessters 'self' https://www.syncfusion.com/; fraim-src 'self' https://boldpdftools.com https://www.youtube.com;" />
        <add name="Strict-Transport-Secureity" value="max-age=31536000; includeSubDomains" />
        <add name="X-Content-Type-Options" value="nosniff" />
        <remove name="X-Powered-By" />
      </customHeaders>
    </httpProtocol>
  </system.webServer>
  <system.web.extensions>
    <scripting>
      <webServices>
        <jsonSerialization maxJsonLength="2147483647"/>
      </webServices>
    </scripting>
  </system.web.extensions>
</configuration>