<filteringRule name="GT" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="&lt;" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="SQL Comment Block" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="\*" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="Cast" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <clear />
                            <add string="cast(" />
                        </denyStrings>
                        <scanHeaders>
                            <clear />
                        </scanHeaders>
                        <appliesTo>
                            <clear />
                        </appliesTo>
                    </filteringRule>
                    <filteringRule name="Select(" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="select(" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="(Select" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="(Select" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="Convert(" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="Convert(" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="OpenVas" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <clear />
                            <add string="openvas" />
                        </denyStrings>
                        <scanHeaders>
                            <clear />
                            <add requestHeader="User-Agent" />
                        </scanHeaders>
                        <appliesTo>
                            <clear />
                        </appliesTo>
                    </filteringRule>
                    <filteringRule name=".php" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string=".php" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="'A=0" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="'A=0" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="Always True" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="1=1" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="hex(" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="hex(" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="Double Quotes" scanUrl="true" scanQueryString="true">
                        <denyStrings>
                            <add string="&quot;" />
                        </denyStrings>
                    </filteringRule>
                    <filteringRule name="alert(" scanUrl="false" scanQueryString="true">
                        <denyStrings>
                            <add string="alert(" />
                        </denyStrings>
                    </filteringRule>