All Questions
4 questions
0
votes
1
answer
52
views
System.ArgumentException Sitecore.Web.XFrameOptionsHeaderModule in IsSitecoreFolderRequest
In my error logs, I often see the error:
System.ArgumentException Sitecore.Web.XFrameOptionsHeaderModule in IsSitecoreFolderRequest
The request paths seem to always contain OpenAccessDataProvider. For ...
1
vote
1
answer
205
views
Sitecore CD Server Trying to Access /sitecore folder
Not sure why Sitecore CD server trying to access /sitecore folder (attached screenshot). Enabled SwitchMasterToWeb.config file and disabled anonymous IIS access to the /sitecore/shell folder and did ...
1
vote
2
answers
567
views
Can I safely disable HTTP methods DELETE and OPTIONS?
A recent security audit recommended that I disable the HTTP methods DELETE and OPTIONS.
I am not opposed to doing this, but have been unable to find any documentation indicating that I can do so ...
5
votes
2
answers
1k
views
Sitecore CD instance - Restrict access to Sitecore folder without blocking keepalive.aspx?
I have a CD/CM site which I hardened by restricting access to Sitecore by adding "sitecore" to the Hidden Segments in the Request Filtering section in IIS (second answer here). However, this has ...