I have Request Filtering enabled in my IIS 7.5 and want to keep it that way, however, one site is basically just a proxy for some internal Java application and I'd like to disable Request Filtering for that site. Is it possible to do that?
You could enable Request Filtering for the top (server) level, and then just add a
<clear /> in the individual sections in the web.config file for the site for which you don't want to use Request Filtering:
<configuration> <system.webServer> <security> <requestFiltering> <denyUrlSequences> <clear /> </denyUrlSequences> <fileExtensions allowUnlisted="true"> <clear /> </fileExtensions> </requestFiltering> </security> </system.webServer> </configuration>