Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Potentially dangerous Request Query stringPotentially dangerous Request Query string
Previous
 
Next
New Post
4/21/2016 2:42 AM
 

Hi,

We haven't done a lot of work on DNN is the past few years, but we have a client with a DNN 5.6.1, ASP.NET 4 site we did several years ago. It's a small site, 4 pages, no membership/login capability, just a mom and pop vacuum cleaner business showing what they do. They need a couple of simple changes, an address update on their google map and a HomeAdvisor Award of Excellence image to be displayed on the home page. Pretty simple stuff.

Downloaded the site, restored the database.bak and using VS 2013 Community brought up the site on IIS Express 8.?. The site ran perfectly. We did a login as a superuser and that appeared to work fine. However, whenever we click Edit Content we get the following error:

--------------------------------------------------------------------------------------------------------------------

A potentially dangerous Request.QueryString value was detected from the client (error="...$SkinLst="<Use Default Site Sk..."). Description: ASP.NET has detected data in the request that is potentially dangerous because it might include HTML markup or script. The data might represent an attempt to compromise the security of your application, such as a cross-site scripting attack. If this type of input is appropriate in your application, you can include code in a web page to explicitly allow it. For more information, see http://go.microsoft.com/fwlink/?LinkID=212874.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.QueryString value was detected from the client (error="...$SkinLst="<Use Default Site Sk...").

Source Error:

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.

--------------------------------------------------------------------------------------------------------------------

We get this error regardless of the page or content we're trying to modify. Turns out, we can't change anything without getting this error. When we developed this, we used Visual Web designer 2010/IIS 7.5 and did some maintenance a year ago using 2012. We can go on the actual production site and make changes. Looked up the error and it has to do with checking for cross scripting attacks which shouldn't really manifest itself here, especially since the error doesn't occur on the production site. Could the problem in any way be associated with using VS2013 Community and IIS 8 or a change in SQL Server versions.

Any ideas on what is going on here and how to correct it? Any suggestions would be appreciated.

Cheers,

Larry

 
Previous
 
Next
HomeHomeUsing DNN Platf...Using DNN Platf...Administration ...Administration ...Potentially dangerous Request Query stringPotentially dangerous Request Query string


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.

Content Layout

Subscribe to DNN Digest

DNN Digest is our monthly email newsletter. It highlights news and content from around the DNN ecosystem, such as new modules and themes, messages from leadership, blog posts and notable tweets. Keep your finger on the pulse of the ecosystem by subscribing.  


Copyright 2017 by DNN Corp Terms of Use Privacy
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out