From 922e7699ed5fa4b3bf0e17e70e0409ea1afce0db Mon Sep 17 00:00:00 2001
From: Marc Alexander <admin@m-a-styles.de>
Date: Sat, 6 Jul 2024 15:36:02 +0200
Subject: [PATCH] [ticket/16907] Adjust request filtering for phpbb paths

PHPBB-16907
---
 phpBB/web.config | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)

diff --git a/phpBB/web.config b/phpBB/web.config
index d0a3cb33fe3..86ea774d8ec 100644
--- a/phpBB/web.config
+++ b/phpBB/web.config
@@ -28,6 +28,33 @@
 			</requestFiltering>
 		</security>
 	</system.webServer>
+	<location path="config">
+		<system.webServer>
+			<security>
+				<requestFiltering>
+					<hiddenSegments>
+						<add segment="default" />
+						<add segment="development" />
+						<add segment="installer" />
+						<add segment="production" />
+						<add segment="test" />
+						<add segment=".htaccess" />
+					</hiddenSegments>
+				</requestFiltering>
+			</security>
+		</system.webServer>
+	</location>
+	<location path="ext">
+		<system.webServer>
+			<security>
+				<requestFiltering>
+					<hiddenSegments>
+						<remove segment="phpbb" />
+					</hiddenSegments>
+				</requestFiltering>
+			</security>
+		</system.webServer>
+	</location>
 	<location path="images/avatars">
 		<system.webServer>
 			<security>