Im looking for a set of best practice rules for Request Filtering similar to what UrlScan adds by default.
Any suggestions or an example list of filters is much appreciated. By default IIS 7.5 only has File Name Extensions, and Hidden Segments filters.
Thanks in advance, Vindberg