Whats the problem with how IIS handles extensions?
IIS handles file extension data correctly. It correctly identifies all file extensions, no matter where in the URL they occur, and is fully compliant with the requisite industry specifications. However, the algorithm that parses file extensions can be misused by providing an URL with an extremely large amount of superfluous extension data.