iis 防止头部攻击 webconfig配置

                <rule name="防止头部攻击" patternSyntax="ExactMatch" stopProcessing="true">
                    <match url="*" negate="true" />
                    <conditions>
                        <add input="{HTTP_HOST}" pattern="域名不加协议" negate="true" />
                        <add input="{HTTP_HOST}" pattern="127.0.0.1" />
                    </conditions>
                    <action type="AbortRequest" />
                </rule>