<system.webServer> <!-- Required for source-maps debugging, do not use in production environment because it exposes source code -->
  <security>
    <requestFiltering>
      <fileExtensions allowUnlisted="true">
        <remove fileExtension=".cs" />
      </fileExtensions>
    </requestFiltering>
  </security>
  <staticContent>
    <mimeMap fileExtension=".cs" mimeType="text/plain" />
  </staticContent>
</system.webServer>