Customizable security descriptors for HTTP.sys

[tdykstra]

Fixes #35569

This is just the what's new update; the update of the article in the servers section of the TOC will be next

---

Internal previews

📄 File	🔗 Preview link
aspnetcore/release-notes/aspnetcore-10.0.md	What's new in ASP.NET Core in .NET 10

[Copilot]

Pull Request Overview

Adds documentation for the new HTTP.sys feature that allows customizing request-queue security descriptors and integrates it into the ASP.NET Core .NET 10 release notes.

• Introduces a new httpsys.md include with an overview and example code for the RequestQueueSecurityDescriptor option.
• Updates aspnetcore-10.0.md to include the new httpsys documentation and add a related content link.

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File	Description
includes/httpsys.md	New include describing the customizable HTTP.sys security API
aspnetcore-10.0.md	Added httpsys.md include and updated the Related content link

Comments suppressed due to low confidence (2)

aspnetcore/release-notes/aspnetcore-10/includes/httpsys.md:4

• Use an xref link for the RequestQueueSecurityDescriptor API instead of a raw source.dot.net URL to maintain consistency with other references.

You can now specify a custom security descriptor for HTTP.sys request queues. The new [RequestQueueSecurityDescriptor](https://source.dot.net/#Microsoft.AspNetCore.Server.HttpSys/HttpSysOptions.cs,a556950881fd2d87) property on <xref:Microsoft.AspNetCore.Server.HttpSys.HttpSysOptions> enables more granular control over access rights for the request queue.

aspnetcore/release-notes/aspnetcore-10.0.md:120

• Format the related content entry as a list item (e.g., prefix with -) for consistency with other sections.

<xref:fundamentals/servers/httpsys>

[wadepickett]

Looks great Tom.