580471 - Ship with a default web.config for IIS installs

Status: RESOLVED FIXED

(Bugzilla :: Installation & Upgrading, enhancement)

Description

[:glob ✱]

Attachment: sample web.config

iis has a file similar to apache's .htaccess which controls the site's configuration.

we should ship with one :)

Comment 1

[Frédéric Buclin]

Attachment: web.config

A web.config file is required to correctly protect params.json + other source files, else these files may be world-readable.

I will update http://bugzilla.readthedocs.org/en/latest/installing/iis.html in a separate bug to mention security.

Comment 2

[Frédéric Buclin]

Attachment: web.config, v1

Removing tabs.

Comment 3

[Gervase Markham [:gerv]]

Comment on attachment 8735183 [details]
web.config, v1

I'm not the right person to review this; I haven't used Windows in a decade. Is there anyone else on the dev team who uses Windows?

Gerv

Comment 4

[Frédéric Buclin]

Comment on attachment 8735183 [details]
web.config, v1

Maybe dylan or dkl?

Comment 5

[Dylan Hardison [:dylan] (he/him)]

Comment on attachment 8735183 [details]
web.config, v1

web.config fails currently because the url rewriting rules changed in the most recent versions of IIS. It doesn't give a very good error, but removing the rewrite section causes it to work... so it's partly right. 

Seems to be related to this: http://stackoverflow.com/questions/32204515/web-config-that-worked-under-iis-7-5-doesnt-work-under-iis-10

Comment 6

[Frédéric Buclin]

(In reply to Dylan Hardison [:dylan] from comment #5)
> web.config fails currently because the url rewriting rules changed in the
> most recent versions of IIS.

Did you install URL Rewrite 2.0 as specified here?

http://bugzilla.readthedocs.io/en/latest/installing/iis.html#enable-rewrite-rules-for-rest

Comment 7

[Dylan Hardison [:dylan] (he/him)]

Comment on attachment 8735183 [details]
web.config, v1

iis needs to be restarted for url rewriting to work. this can be corrected in docs.

Comment 8

[Dylan Hardison [:dylan] (he/him)]

To github.com:bugzilla/bugzilla.git
   457bf33..22ef8ff  master -> master