title: IIS - block requests by URL pattern
body: <p>I have a web app hosted on IIS 7.</p>
  
  <p>I need to block requests that do not match the following pattern:</p>
  
  <p><code>/static/index.html[\?a-zA-Z0-9_]*</code></p>
  
  <p>So that the following request will be blocked:</p>
  
  <p><a href="http://www.example.com/static/index.html?javascript:alert(0)" rel="nofollow">http://www.example.com/static/index.html?javascript:alert(0)</a></p>
  
  <p>I've tried to add denyUrlSequences config in my web.config but it seems like regex patterns are not supported there.</p>
  
  <p>Are there any other options?</p>
  
  <p>Thanks in advance.</p>