IIS 配置referer 请求筛选_请求拒绝

一、IIS 配置Referer 拒绝

解析：

访问静态内容，拒绝指定的referer,例如：拒绝后，对应的网站引用当前网站的静态资源会被拒绝。

二、配置后的文件参数如下

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
      <system.webServer>
    <httpProtocol>
      <customHeaders>
        <add name="Access-Control-Allow-Origin" value="*" />
        <add name="Access-Control-Allow-Methods" value="GET" />
      </customHeaders>
    </httpProtocol>
        <staticContent>
            <remove fileExtension=".woff2" />
            <mimeMap fileExtension=".woff2" mimeType="font/woff2" />
        </staticContent>
        <security>
            <requestFiltering>
                <filteringRules>
                    <filteringRule name="referer" scanUrl="true" scanQueryString="true">
                        <scanHeaders>
                            <clear />
                            <add requestHeader="referer" />
                        </scanHeaders>
                        <denyStrings>
                            <clear />
                            <add string="https://mini.moneylii.com" />
                        </denyStrings>
                        <appliesTo>
                            <clear />
                        </appliesTo>
                    </filteringRule>
                </filteringRules>
            </requestFiltering>
        </security>
  </system.webServer>
</configuration>