Open
Description
Motivation
In 599A the monthly chat meeting from May 5th 2025 we decided to add a stricter sibling to rule 954100 to address issue #4077. Especially the missing drive letter part. The forward slash was already covered in PR #4094.
Proposed solution
We'll add a new RESPONSE rule at PL2, that checks for /inetpub without drive letter, to the IIS-specific file DATA-LEAKAGES-IIS.conf. Probably not everyone will run this. And we think it will be beneficial to IIS folks.