{"action":"created","issue":{"url":"https://api.github.com/repos/aspnet/Home/issues/1441","repository_url":"https://api.github.com/repos/aspnet/Home","labels_url":"https://api.github.com/repos/aspnet/Home/issues/1441/labels{/name}","comments_url":"https://api.github.com/repos/aspnet/Home/issues/1441/comments","events_url":"https://api.github.com/repos/aspnet/Home/issues/1441/events","html_url":"https://github.com/aspnet/Home/issues/1441","id":154905054,"number":1441,"title":"How to in ASP.NET Core 1.0: /system.webServer/security/requestFiltering/requestLimits@maxQueryString ","user":{"login":"aubergemediale","id":12559471,"avatar_url":"https://avatars.githubusercontent.com/u/12559471?v=3","gravatar_id":"","url":"https://api.github.com/users/aubergemediale","html_url":"https://github.com/aubergemediale","followers_url":"https://api.github.com/users/aubergemediale/followers","following_url":"https://api.github.com/users/aubergemediale/following{/other_user}","gists_url":"https://api.github.com/users/aubergemediale/gists{/gist_id}","starred_url":"https://api.github.com/users/aubergemediale/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aubergemediale/subscriptions","organizations_url":"https://api.github.com/users/aubergemediale/orgs","repos_url":"https://api.github.com/users/aubergemediale/repos","events_url":"https://api.github.com/users/aubergemediale/events{/privacy}","received_events_url":"https://api.github.com/users/aubergemediale/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2016-05-15T11:56:48Z","updated_at":"2016-05-15T16:06:28Z","closed_at":null,"body":"How can request filtering be configured now, e.g. how to change the max query string length?"},"comment":{"url":"https://api.github.com/repos/aspnet/Home/issues/comments/219294452","html_url":"https://github.com/aspnet/Home/issues/1441#issuecomment-219294452","issue_url":"https://api.github.com/repos/aspnet/Home/issues/1441","id":219294452,"user":{"login":"GuardRex","id":1622880,"avatar_url":"https://avatars.githubusercontent.com/u/1622880?v=3","gravatar_id":"","url":"https://api.github.com/users/GuardRex","html_url":"https://github.com/GuardRex","followers_url":"https://api.github.com/users/GuardRex/followers","following_url":"https://api.github.com/users/GuardRex/following{/other_user}","gists_url":"https://api.github.com/users/GuardRex/gists{/gist_id}","starred_url":"https://api.github.com/users/GuardRex/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GuardRex/subscriptions","organizations_url":"https://api.github.com/users/GuardRex/orgs","repos_url":"https://api.github.com/users/GuardRex/repos","events_url":"https://api.github.com/users/GuardRex/events{/privacy}","received_events_url":"https://api.github.com/users/GuardRex/received_events","type":"User","site_admin":false},"created_at":"2016-05-15T16:06:27Z","updated_at":"2016-05-15T16:06:27Z","body":"Yes, that's a slightly older file tho. The IISIntegration sample is kept a bit more up-to-date in regard to `web.config`. https://github.com/aspnet/IISIntegration/blob/dev/samples/IISSample/web.config\r\n\r\nI did have the desire (and make the suggestion) to use Hidden Segments to protect app assets if the `web.config` file was ever accidentally renamed or removed from the deployment. That will be mentioned in the upcoming `Publishing to IIS` doc. However, here is an example for Hidden Segments from one of my self-contained test apps produced by my own flavor of the `publish-iis` tooling, and your mods to your `web.config` for Request Filtering will be similarly handled ...\r\n```xml\r\n<?xml version=\"1.0\" encoding=\"utf-8\"?>\r\n<configuration>\r\n  <system.webServer>\r\n    <handlers>\r\n      <add name=\"aspNetCore\" path=\"*\" verb=\"*\" modules=\"AspNetCoreModule\" resourceType=\"Unspecified\" />\r\n    </handlers>\r\n    <aspNetCore processPath=\".\\teststandalone.exe\" stdoutLogEnabled=\"true\" stdoutLogFile=\".\\logs\\teststandalone\" />\r\n    <security>\r\n      <requestFiltering>\r\n        <hiddenSegments>\r\n          <add segment=\"teststandalone.xml\" />\r\n          <add segment=\"teststandalone.deps.json\" />\r\n          <add segment=\"teststandalone.runtimeconfig.json\" />\r\n        </hiddenSegments>\r\n      </requestFiltering>\r\n    </security>\r\n  </system.webServer>\r\n</configuration>\r\n```"}}