Deny OPTIONS stops all type of requests

Question

I am following these instructions to add request filtering. I want to avoid OPTIONS verb but when I add it as 'deny' verb inside IIS 10, IIS is not serving any request with get, put, post or delete.

As you can see, a get request is also not being served at all....

Answer 1

Nowadays browsers are following CORS rules to access web server resources,

https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS

So, your blocking of OPTIONS requests literally break the whole CORS workflows, and no doubt nothing more is being requested/served.