Untitled

mail@pastecode.io avatar
unknown
xml
2 years ago
21 kB
6
Indexable
<?xml version="1.0" encoding="utf-8"?>
<!--
  For more information on how to configure your ASP.NET application, please visit
  http://go.microsoft.com/fwlink/?LinkId=301879
  -->
<configuration>
  <configSections>
    <!-- For more information on Entity Framework configuration, visit http://go.microsoft.com/fwlink/?LinkID=237468 -->
    <section name="entityFramework" type="System.Data.Entity.Internal.ConfigFile.EntityFrameworkSection, EntityFramework, Version=6.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" requirePermission="false" />
  </configSections>
  <system.diagnostics>
    <trace>
      <listeners>
        <add type="Microsoft.WindowsAzure.Diagnostics.DiagnosticMonitorTraceListener, Microsoft.WindowsAzure.Diagnostics, Version=2.8.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" name="AzureDiagnostics">
          <filter type="" />
        </add>
        <add name="myAppInsightsListener" type="Microsoft.ApplicationInsights.TraceListener.ApplicationInsightsTraceListener, Microsoft.ApplicationInsights.TraceListener" />
      </listeners>
    </trace>
  </system.diagnostics>
	<connectionStrings>
		<add name="UnilinkContext" connectionString="Data Source=UnilinkdevSQL02.cloudapp.net;Initial Catalog=Unilink;Persist Security Info=True;User ID=lpena;Password=M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
		<add name="StorageConnectionString" connectionString="DefaultEndpointsProtocol=https;AccountName=unilinkqastorage;AccountKey=tBR1Wcw3+e0kAh8HatYNTiPEUV0iwg3j6cSY86PouVvogWwNf0H517xlvknKuPQUk9BbeAxUmBAtElKpMNgCug==" />
		<add name="AssetsConnectionString" connectionString="provider=AzureBlobStorage;DefaultEndpointsProtocol=http;AccountName=unilinkqastorage;AccountKey=tBR1Wcw3+e0kAh8HatYNTiPEUV0iwg3j6cSY86PouVvogWwNf0H517xlvknKuPQUk9BbeAxUmBAtElKpMNgCug==" />
		<add name="AssetsConnectionString1" connectionString="provider=AzureBlobStorage;DefaultEndpointsProtocol=http;AccountName=unilinkqastorage;AccountKey=tBR1Wcw3+e0kAh8HatYNTiPEUV0iwg3j6cSY86PouVvogWwNf0H517xlvknKuPQUk9BbeAxUmBAtElKpMNgCug==" />
		<add name="UnilinkDemo" connectionString="data source=UnilinkdevSQL02.cloudapp.net;initial catalog=UnilinkDemo;persist security info=True;user id=lpena;password=M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
		<add name="UnilinkMetadata" connectionString="data source=UnilinkdevSQL02.cloudapp.net;initial catalog=UnilinkMetadataDesarrollo;persist security info=True;user id=lpena;password=M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
		<add name="UnilinkSessionContext" connectionString="Data Source=UnilinkdevSQL02.cloudapp.net;Persist Security Info=True;User ID =lpena; Password =M3q6C+EUz8cySsH1;MultipleActiveResultSets=True;Connect Timeout=420" providerName="System.Data.SqlClient" />
	</connectionStrings>
	<appSettings>
		<!-- Configuracion compartida -->
		<add key="webpages:Version" value="3.0.0.0" />
		<add key="webpages:Enabled" value="false" />
		<add key="ClientValidationEnabled" value="true" />
		<add key="UnobtrusiveJavaScriptEnabled" value="true" />
		<add key="QueueName" value="unilinkemailtesting" />
		<add key="recaptcha:secret-key" value="6LfZaiMTAAAAAE-hmi8vTr2YEzPQTOiAQQUCCLVx" />
		<add key="recaptcha:public-key" value="6LfZaiMTAAAAAL7wW-gzZwtvkmxU-GXH_Yg6mNSM" />
		<!--Configuracion exclusiva de cotizaciones-->
		<add key="ImgPath" value="https://requisition.blob.core.windows.net" />
		<add key="ProjectBase" value="" />
		<add key="timezoneoffset" value="240" />
		<add key="URL_SERVER" value="https://qamantos.ulinksolution.com" />
		<add key="EmailBaseURL" value="https://qamantos.ulinksolution.com/Amalgam.Web/" />
		<add key="WebHookEmailBaseURL" value="http://unilinkworkerrole01.cloudapp.net/" />
		<add key="BaseURL" value="https://qamantos.ulinksolution.com/IntegrationModule.Web/" />
		<!-- configuracion exclusiva de licitaciones-->
		<add key="RolSupervisor" value="31" />
		<add key="RolObserver" value="32" />
		<add key="RolBuyer" value="28" />
		<add key="RolSupplier" value="29" />
		<add key="RolInvited" value="33" />
		<add key="MaxFileSize" value="2000000000" />
		<add key="StorageAccountName" value="unilink" />
		<!-- configuracion identityserver -->
		<add key="Application.Env" value="testing" />
		<add key="Application.ApplicationInsightsKey" value="f8bad63a-3af0-4def-8eca-412e7cd1ef07" />
		<add key="Application.LogoUrl" value="Content/img/menu/logo-unilink.png" />
		<add key="Application.DefaultLogoUrl" value="Content/img/menu/logo-unilink.png" />
		<add key="Application.BaseUrl" value="https://qamantos.ulinksolution.com" />
		<add key="Application.EmailBaseUrl" value="https://qamantos.ulinksolution.com/Amalgam.Web/" />
		<!-- configuración identityserver -->
		<add key="Identity.OwinCookieName" value="m_m_session" />
		<add key="Identity.OwinCookieLoginPath" value="https://qamantos.ulinksolution.com/home/index" />
		<add key="Identity.Authority" value="https://qasts.ulinksolution.com" />
		<add key="Identity.ClientId" value="mantos.marketplace" />
		<add key="Identity.ClientSecret" value="qa-mantos-marketplace" />
		<add key="Identity.Scope" value="openid profile enterprise roles" />
		<add key="Identity.RedirectUri" value="https://qamantos.ulinksolution.com" />
		<add key="Identity.PostLogoutRedirectUri" value="https://qamantos.ulinksolution.com" />
		<add key="Identity.ApplicationId" value="E16DFF36-E405-4DAE-BF3F-48852E159AEF" />
		<add key="Identity.PortalUrl" value="https://qasts.ulinksolution.com" />
		<add key="Identity.UnauthorizedUrl" value="https://qamantos.ulinksolution.com/error/unauthorized" />
		<add key="Identity.LockedUrl" value="https://qamantos.ulinksolution.com/error/locked" />
		<add key="PortalAccuseller" value="https://portal.accuseller.com/TermsAndConditions" />
		<add key="EPPlus:ExcelPackage.LicenseContext" value="NonCommercial" />
	</appSettings>
  <system.web>
    <globalization culture="auto:es-CL" uiCulture="auto:es-CL" />
    <machineKey compatibilityMode="Framework20SP2" validationKey="FCF1C7CB12C600522ED1C77F46644FD33B16B43963D03D2A588581A8736838A55CD070AA2D1B9A9A9EC2277E73710F878479FECEDFD374542BAFE6ED105CE9C3" decryptionKey="E31238082C25D2F726F183BC83F90A874CF3BDB965980A2C7BD8D6A7B56B86BD" validation="SHA1" decryption="AES" />
    <compilation debug="true" targetFramework="4.7.2">
      <assemblies>
        <add assembly="System.Runtime, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" />
        <add assembly="netstandard, Version=2.0.0.0, Culture=neutral, PublicKeyToken=cc7b13ffcd2ddd51" />
      </assemblies>
    </compilation>
    <httpRuntime targetFramework="4.7.2" maxRequestLength="2147483647" executionTimeout="1600" requestLengthDiskThreshold="2147483647" requestPathInvalidCharacters="" requestValidationMode="2.0" />
    <sessionState mode="SQLServer" timeout="60" allowCustomSqlDatabase="true" sqlConnectionString="UnilinkSessionContext" cookieless="false" />
    <customErrors mode="Off">
    </customErrors>
    <!--<customErrors mode="On" defaultRedirect="error/generalerror.aspx">
      <error statusCode="403" redirect="error/forbidden.aspx" />
      <error statusCode="404" redirect="error/pagenotfound.aspx" />
      <error statusCode="500" redirect="error/internalerror.aspx" />
    </customErrors>-->
    <httpModules>
      <add name="TelemetryCorrelationHttpModule" type="Microsoft.AspNet.TelemetryCorrelation.TelemetryCorrelationHttpModule, Microsoft.AspNet.TelemetryCorrelation" />
      <add name="ApplicationInsightsWebTracking" type="Microsoft.ApplicationInsights.Web.ApplicationInsightsHttpModule, Microsoft.AI.Web" />
    </httpModules>
  </system.web>
  <system.webServer>
    <httpCompression directory="%SystemDrive%\websites\_compressed" minFileSizeForComp="1024">
      <scheme dll="%Windir%\system32\inetsrv\gzip.dll" name="gzip" />
      <dynamicTypes>
        <add enabled="true" mimeType="text/*" />
        <add enabled="true" mimeType="message/*" />
        <add enabled="true" mimeType="application/javascript" />
        <add enabled="true" mimeType="application/json" />
        <add enabled="true" mimeType="application/json; charset=utf-8" />
        <add enabled="false" mimeType="*/*" />
      </dynamicTypes>
      <staticTypes>
        <add enabled="true" mimeType="text/*" />
        <add enabled="true" mimeType="message/*" />
        <add enabled="true" mimeType="application/javascript" />
        <add enabled="true" mimeType="application/json" />
        <add enabled="true" mimeType="application/json; charset=utf-8" />
        <add enabled="false" mimeType="*/*" />
      </staticTypes>
    </httpCompression>
    <urlCompression doDynamicCompression="true" doStaticCompression="true" />
    <modules runAllManagedModulesForAllRequests="false">
      <remove name="WebDAVModule" />
      <remove name="TelemetryCorrelationHttpModule" />
      <add name="TelemetryCorrelationHttpModule" type="Microsoft.AspNet.TelemetryCorrelation.TelemetryCorrelationHttpModule, Microsoft.AspNet.TelemetryCorrelation" preCondition="managedHandler" />
      <remove name="ApplicationInsightsWebTracking" />
      <add name="ApplicationInsightsWebTracking" type="Microsoft.ApplicationInsights.Web.ApplicationInsightsHttpModule, Microsoft.AI.Web" preCondition="managedHandler" />
    </modules>
    <validation validateIntegratedModeConfiguration="false" />
    <handlers>
      <remove name="WebDAV" />
      <remove name="ExtensionlessUrlHandler-Integrated-4.0" />
      <remove name="OPTIONSVerbHandler" />
      <remove name="TRACEVerbHandler" />
      <add name="ExtensionlessUrlHandler-Integrated-4.0" path="*." verb="*" type="System.Web.Handlers.TransferRequestHandler" preCondition="integratedMode,runtimeVersionv4.0" />
    </handlers>
    <rewrite>
      <outboundRules>
        <clear />
        <rule name="Ensure samesite Cookies" preCondition="Missing samesite cookie">
          <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
          <action type="Rewrite" value="{R:0}; SameSite=strict" />
        </rule>
        <rule name="Ensure httpOnly Cookies" preCondition="Missing httpOnly cookie">
          <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
          <action type="Rewrite" value="{R:0}; HttpOnly" />
        </rule>
        <rule name="Ensure secure Cookies" preCondition="Missing secure cookie">
          <match serverVariable="RESPONSE_Set_Cookie" pattern=".*" negate="false" />
          <action type="Rewrite" value="{R:0}; secure" />
        </rule>
        <rule name="Remove Server header">
          <match serverVariable="RESPONSE_Server" pattern=".+" />
          <action type="Rewrite" value="" />
        </rule>
        <preConditions>
          <preCondition name="ResponseIsHtml1">
            <add input="{RESPONSE_CONTENT_TYPE}" pattern="^text/html" />
          </preCondition>
          <preCondition name="Missing secure cookie">
            <!-- Don't remove the first line here, it does do stuff! -->
            <add input="{RESPONSE_Set_Cookie}" pattern="." />
            <add input="{RESPONSE_Set_Cookie}" pattern="; secure" negate="true" />
          </preCondition>
          <preCondition name="Missing httpOnly cookie">
            <!-- Don't remove the first line! -->
            <add input="{RESPONSE_Set_Cookie}" pattern="." />
            <add input="{RESPONSE_Set_Cookie}" pattern="; HttpOnly" negate="true" />
          </preCondition>
          <preCondition name="Missing samesite cookie">
            <!-- Don't remove the first line here, it does do stuff! -->
            <add input="{RESPONSE_Set_Cookie}" pattern="." />
            <add input="{RESPONSE_Set_Cookie}" pattern="; SameSite=strict" negate="true" />
          </preCondition>
        </preConditions>
      </outboundRules>
      <rules>
        <rule name="HTTPS Force" stopProcessing="true">
          <match url="(.*)" />
          <conditions>
            <add input="{HTTPS}" pattern="^OFF$" />
          </conditions>
          <action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" />
        </rule>
        <rule name="ANGULAR APP" stopProcessing="true">
          <match url="modules" />
          <conditions logicalGrouping="MatchAll">
            <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
            <add input="{REQUEST_URI}" matchType="Pattern" pattern="/api/" negate="true" />
          </conditions>
          <action type="Rewrite" url="callback?returnUrl={REQUEST_URI}" />
        </rule>
      </rules>
    </rewrite>
    <httpProtocol>
      <customHeaders>
        <clear />
        <remove name="X-Powered-By" />
        <remove name="X-Aspnet-Version" />
        <remove name="Server" />
        <!-- Protects against Clickjacking attacks. ref.: http://stackoverflow.com/a/22105445/1233379 -->
        <add name="X-Frame-Options" value="DENY" />
        <!-- Protects against Clickjacking attacks. ref.: https://www.owasp.org/index.php/HTTP_Strict_Transport_Security_Cheat_Sheet -->
        <add name="Strict-Transport-Security" value="max-age=31536000; includeSubDomains; preload" />
        <!-- Protects against XSS injections. ref.: https://www.veracode.com/blog/2014/03/guidelines-for-setting-security-headers/ -->
        <add name="X-XSS-Protection" value="1; mode=block" />
        <!-- Protects against MIME-type confusion attack. ref.: https://www.veracode.com/blog/2014/03/guidelines-for-setting-security-headers/ -->
        <add name="X-Content-Type-Options" value="nosniff" />
        <!-- CSP modern XSS directive-based defence, used since 2014. ref.: http://content-security-policy.com/ -->
        <!--<add name="Content-Security-Policy" value="script-src 'self' https://www.googletagmanager.com https://www.google-analytics.com https://az416426.vo.msecnd.net/scripts/a/ai.0.js https://az416426.vo.msecnd.net/next/ai.2.min.js 'unsafe-inline' 'unsafe-eval' devlicitaciones-aguasandinas.ulinksolution.com:443; object-src 'self'" />-->
        <!-- Prevents from leaking referrer data over insecure connections. ref.: https://scotthelme.co.uk/a-new-security-header-referrer-policy/ -->
        <add name="Referrer-Policy" value="no-referrer" />
        <!-- The Expect-CT header can be used to check that all your certificates have been properly listed ref.:https://www.ryadel.com/en/expect-ct-http-header-security-chrome/ -->
        <!--<add name="Expect-CT" value="enforce, max-age=300, report-uri='https://www.your-report-website.com/'" />-->
      </customHeaders>
    </httpProtocol>
    <security>
      <requestFiltering>
        <requestLimits maxAllowedContentLength="2147483647" />
        <hiddenSegments>
          <add segment="package.json" />
          <add segment="package-lock.json" />
        </hiddenSegments>
        <verbs allowUnlisted="false">
          <add verb="POST" allowed="true" />
          <add verb="DELETE" allowed="true" />
          <add verb="PUT" allowed="true" />
          <add verb="OPTIONS" allowed="true" />
          <add verb="GET" allowed="true" />
        </verbs>
      </requestFiltering>
    </security>
  </system.webServer>
  <runtime>
    <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
      <dependentAssembly>
        <assemblyIdentity name="Newtonsoft.Json" culture="neutral" publicKeyToken="30ad4fe6b2a6aeed" />
        <bindingRedirect oldVersion="0.0.0.0-11.0.0.0" newVersion="11.0.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Optimization" publicKeyToken="31bf3856ad364e35" />
        <bindingRedirect oldVersion="1.0.0.0-1.1.0.0" newVersion="1.1.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="WebGrease" publicKeyToken="31bf3856ad364e35" />
        <bindingRedirect oldVersion="0.0.0.0-1.5.2.14234" newVersion="1.5.2.14234" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Practices.ServiceLocation" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-1.3.0.0" newVersion="1.3.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Owin.Security.OAuth" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Owin.Security" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Owin.Security.Cookies" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.2.2.0" newVersion="4.2.2.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Http" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Net.Http.Formatting" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.2.3.0" newVersion="5.2.3.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Practices.Unity" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-3.5.0.0" newVersion="3.5.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Data.Services.Client" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.7.0.0" newVersion="5.7.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Data.OData" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.7.0.0" newVersion="5.7.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.Data.Edm" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.7.0.0" newVersion="5.7.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Memory" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.0.1.1" newVersion="4.0.1.1" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="Microsoft.ApplicationInsights" publicKeyToken="31bf3856ad364e35" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-2.21.0.429" newVersion="2.21.0.429" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Runtime.CompilerServices.Unsafe" publicKeyToken="b03f5f7f11d50a3a" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.0.0.0" newVersion="5.0.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Diagnostics.DiagnosticSource" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-5.0.0.0" newVersion="5.0.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Buffers" publicKeyToken="cc7b13ffcd2ddd51" culture="neutral" />
        <bindingRedirect oldVersion="0.0.0.0-4.0.3.0" newVersion="4.0.3.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Helpers" publicKeyToken="31bf3856ad364e35" />
        <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.WebPages" publicKeyToken="31bf3856ad364e35" />
        <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
      </dependentAssembly>
      <dependentAssembly>
        <assemblyIdentity name="System.Web.Mvc" publicKeyToken="31bf3856ad364e35" />
        <bindingRedirect oldVersion="0.0.0.0-5.2.9.0" newVersion="5.2.9.0" />
      </dependentAssembly>
    </assemblyBinding>
  </runtime>
  <entityFramework>
    <defaultConnectionFactory type="System.Data.Entity.Infrastructure.LocalDbConnectionFactory, EntityFramework">
      <parameters>
        <parameter value="mssqllocaldb" />
      </parameters>
    </defaultConnectionFactory>
    <providers>
      <provider invariantName="System.Data.SqlClient" type="System.Data.Entity.SqlServer.SqlProviderServices, EntityFramework.SqlServer" />
    </providers>
  </entityFramework>
</configuration>