mercredi 1 novembre 2017

Is there a configuration on IIS to avoid showing "A potentially dangerous Request.Path value was detected from the client (:)."

I also searched the exception message on StackOverflow and the returned answers were not my cases.

Let's see my cases.

  1. I access to a direct URL which ":." (without quotes) symbols are appened to my web application name: http://localhost/mywebapp:.

  2. Access to *.aspx pages appended ":." symbols and the URL does not include the web application name http://localhost/Default.aspx:.

In this cases, the exception occurs before entering my web application. (I did debug my web application at Application_Start, Application_Error and the debugger did not hit to it)

So, guys, is there any configuration that I can apply for IIS server to avoid this exception. I don't want to show the yellow exception page like this to the end users. I want to show a general message instead of it.

enter image description here




Aucun commentaire:

Enregistrer un commentaire