Hello-World-Component/libraries/phpspreadsheet/vendor/web.config

<?xml version="1.0"?>
<configuration>
    <system.web>
        <authorization>
            <deny users="*" />              
        </authorization>
    </system.web>
</configuration>