-2

how to resolve this kind of issues? please help me

> 30452  ERROR Application error. Exception: System.Web.HttpException
> Message: A potentially dangerous Request.Path value was detected from
> the client (>).
> 
> Source: System.Web    at
> System.Web.HttpRequest.ValidateInputIfRequiredByConfig()    at
> System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext
> context)
  • add more information, when it is happening? – Vipin Banka Sep 14 '19 at 7:09
  • Add an url to question. You should check why ">" presents in your url and if it is ok why it is not encoded (to &gt;). Most likely that ">" character is blocked by <httpRuntime requestPathInvalidCharacters /> parameter of web.config (requestPathInvalidCharacters contains ">"). – x3mxray Sep 14 '19 at 9:24
1

ASP.NET implements various algorithms for securing ASP.NET websites against potentially malicious user requests, for example, by rejecting requests that contain characters susceptible to be used in XSS attacks, suspiciously long request paths, etc.

When potentially malicious requests hit a Sitecore website, they would result in different errors either shown to the website visitor or written to Sitecore log files. You can see the multiple types of scenarios for this.

The error you are getting comes when the requested URL contains invalid characters.

  • You need to follow below steps to verify that the links you render on the pages do not contain the invalid characters mentioned in the error message:

    1. For the links rendered using the Sitecore API, ensure that the encodeNameReplacements block in the Web.config file contains the appropriate record:

      <replace mode="on" find="INVALID CHARACTER" replaceWith="REPLACING CHARACTER" />
      
    2. For the links generated by custom code, manually verify that they do not contain these characters and their encoded counterparts.

  • In case you do want to use these characters in the path, add the requestPathInvalidCharacters attribute to the httpRuntime node in the Web.config file as follows:

      <httpRuntime ... requestPathInvalidCharacters="&lt;,&gt;,*,%,&amp;,:,\,?"/>
    

Then exclude particular characters from this list. For more see the Sitecore KB article - https://kb.sitecore.net/articles/031258

| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.