Web.config

<?xml version="1.0" encoding="utf-8"?>
<configuration>

  <system.webServer>

    <httpProtocol>
      <customHeaders>
        <add name="Access-Control-Allow-Origin" value="*" />
        <add name="X-Frame-Options" value="SAMEORIGIN" />
        <add name="X-XSS-Protection" value="1; mode=block" />
      </customHeaders>
    </httpProtocol>

    <urlCompression doStaticCompression="true" doDynamicCompression="true" />

    <httpCompression>
      <staticTypes>
        <clear />
        <add enabled="true" mimeType="text/*" />
        <add enabled="true" mimeType="message/*" />
        <add enabled="true" mimeType="application/javascript" />
        <add enabled="true" mimeType="application/atom+xml" />
        <add enabled="true" mimeType="application/xaml+xml" />
        <add enabled="true" mimeType="application/json" />
        <add enabled="true" mimeType="image/svg+xml" />
        <add enabled="true" mimeType="image/x-emf" />
        <add enabled="false" mimeType="*/*" />
      </staticTypes>
      <dynamicTypes>
        <clear />
        <add enabled="true" mimeType="text/*" />
        <add enabled="true" mimeType="message/*" />
        <add enabled="true" mimeType="application/javascript" />
        <add enabled="true" mimeType="application/json" />
        <add enabled="true" mimeType="application/atom+xml" />
        <add enabled="true" mimeType="application/atom+xml;charset=utf-8" />
        <add enabled="false" mimeType="*/*" />
      </dynamicTypes>
    </httpCompression>

    <rewrite>
      <rewriteMaps configSource="Configuration\rewriteMaps.config" />
      <rules configSource="Configuration\rewriteRules.config" />
    </rewrite>

  </system.webServer>

</configuration>