Config your IIS server to use the “Content-Security-Policy” header

From Ian Oxley’s Sitepoint article – Improving Web Security with the Content Security Policy, it would seem that you define your Content Security Policy (and, in turn, populate those headers) directly in your IIS configuration file. The example given in the linked post, <system.webServer> <httpProtocol> <customHeaders> <add name=”Content-Security-Policy” value=”default-src ‘self’;” /> </customHeaders> </httpProtocol> </system.webServer> demonstrates … Read more

How to disable HTTP/2 on IIS 10

To disable HTTP/2 on Windows 10 HTTP.SYS, set the following registry value on the Windows 10 desktop in HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\HTTP\Parameters EnableHttp2Tls REG_DWORD 0 EnableHttp2Cleartext REG_DWORD 0 The second of these is only necessary if the failure is with HTTP. The first is for HTTPS.

IIS Returning Old User Names to my application

I’ve had similar issues lately and as stated in Robert MacLean’s answer, AviD’s group policy changes don’t work if you’re not logging in as the users. I found changing the LSA Lookup Cache size as described is MS KB946358 worked without rebooting or recycling any apppool or services. I found this as an answer to … Read more

An error occurred in the secure channel support – Classic ASP HTTP Request

I have had the exact same problem after migrating from 2003 to 2008 R2 and found the solution. Change: Set objhttp = Server.CreateObject (“MSXML2.ServerXMLHTTP.6.0”) to: Set objhttp = Server.CreateObject (“MSXML2.XMLHTTP.6.0”) and your problem will go away. I tried to find the pros and cons about both objects, but haven’t yet found a reason to not … Read more

Hata!: SQLSTATE[HY000] [1045] Access denied for user 'divattrend_liink'@'localhost' (using password: YES)