doneit-web/web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
  <system.webServer>
   <modules>

   <remove name="WebDAVModule"/>

   </modules>

   <handlers>

   <remove name="WebDAV"/>
   
</handlers>
    <rewrite>
      <rules>
        <rule name="AngularRewrite" stopProcessing="true">
          <match url=".*" />
          <conditions logicalGrouping="MatchAll">
            <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
          </conditions>
          <action type="Rewrite" url="/" />
        </rule>
      </rules>
    </rewrite>
    <httpProtocol>
      <customHeaders>
        <!-- Iframe on the same host only -->
        <add name="Content-Security-Policy" value="frame-ancestors https://gdqas.oapr.gov.ao/" />
        <!-- HTTPS on -->
        <add name="Strict-Transport-Security" value="max-age=31536000" />
        <add name="Referrer-Policy" value="no-referrer" />
        <add name="X-Content-Type-Options" value="nosniff" />
        <!-- <add e="Expect-CT" value="enforce, max-age=86400" /> -->
        <!-- Permision -->
        <add name="Permissions-Policy" value="camera=(), microphone=*" />
        <!-- same origin only -->
        <add name="Cross-Origin-Resource-Policy" value="cross-origin" />
        <!-- same origin only -->
        <add name="Cross-Origin-Opener-Policy" value="require-corp" />
      </customHeaders>
    </httpProtocol>


      <!--  <directoryBrowse enabled="false" />
        <httpErrors>
            <remove statusCode="404" subStatusCode="-1" />
            <remove statusCode="403" subStatusCode="-1" />
            <error statusCode="403" prefixLanguageFilePath="" path="/home/events" responseMode="ExecuteURL" />
            <error statusCode="404" prefixLanguageFilePath="" path="/index.html" responseMode="ExecuteURL" />
        </httpErrors> -->


  </system.webServer>
</configuration>