<!-- Routing configuration for Microsoft IIS web server --> <configuration> <system.webServer> <security> <requestFiltering> <hiddenSegments> <add segment=".env" /> <add segment="silverstripe-cache" /> <add segment="composer.json" /> <add segment="composer.lock" /> </hiddenSegments> <fileExtensions allowUnlisted="true" > <add fileExtension=".ss" allowed="false"/> <add fileExtension=".yml" allowed="false"/> </fileExtensions> </requestFiltering> </security> </system.webServer> </configuration>