<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <security>
            <requestFiltering>
                <fileExtensions>
                  	<add fileExtension=".php" allowed="false" />
                  	<add fileExtension=".asp" allowed="false" />
                  	<add fileExtension=".aspx" allowed="false" />
			<add fileExtension=".pl" allowed="false" />
			<add fileExtension=".sh" allowed="false" />
                </fileExtensions>
            </requestFiltering>
        </security>
  </system.webServer>
</configuration>  