Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

NameTypeDefaultDescription
normalizeRequestbooleantrueThis is essentially obligatory with IIS, and causes the software to determine the URLs its processing based on information from the SP's own configuration per its <Site> element(s). Turning this off will generally result in security issues unless you avoid any use of content settings and the RequestMapper.
safeHeaderNamesbooleanfalse (true if theĀ userHeaders useHeaders option is enabled)

Causes all non-alphanumeric characters to be automatically removed from the names of all SP-controlled headers. This defaults to false for compatibility with V2, but is auto-enabled if the useHeaders option is set, since that option is new to V3. It should be enabled if the old ISAPI extension is used.

useVariablesbooleantrueControls whether attributes are passed the the application as Server Variables.
useHeadersbooleanfalse

Controls whether attributes are passed as HTTP Headers.

This setting should be avoided, but is present to provide a level of compatibility with applications developed against the old ISAPI extension.

...