Default Safewhere admin security settings xml configuration
<system.webServer>
<staticContent>
<clientCache cacheControlMode="UseMaxAge" cacheControlMaxAge="30.00:00:00" />
</staticContent>
<httpProtocol>
<customHeaders>
<remove name="X-Powered-By" />
<remove name="Cache-Control" />
<remove name="Content-Security-Policy" />
<add name="Content-Security-Policy" value="object-src 'self'; child-src 'self'; connect-src 'self' *; img-src 'self' data: www.gravatar.com *.inlinemanual.com; media-src 'self'; frame-ancestors 'self';" />
</customHeaders>
</httpProtocol>
<handlers>
<add name="StaticFileModuleMap" path="*.map" verb="*" modules="StaticFileModule" resourceType="File" requireAccess="Read" />
<add name="aspNetCore" path="*" verb="*" modules="AspNetCoreModuleV2" resourceType="Unspecified" />
</handlers>
<security>
<requestFiltering allowDoubleEscaping="true"></requestFiltering>
</security>
<aspNetCore processPath="dotnet" arguments=".\OneAdmin.Net.Host.dll" stdoutLogEnabled="true" stdoutLogFile=".\logs\stdout" forwardWindowsAuthToken="false" hostingModel="inprocess" />
</system.webServer>