php-custom-content-uploader/html/web.config

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <security>
            <requestFiltering>
                <denyUrlSequences>
                    <add sequence="/users.json" />
                </denyUrlSequences>
            </requestFiltering>
        </security>
    </system.webServer>
</configuration>