A potentially dangerous Request.Path value was detected from the client (:) due to HEAD HTTP command

0

I have one client that is accessing our site but appears to be using some type of proxy. When they visit our site root I get an exception logged.

System.Web.HttpException (0x80004005): A potentially dangerous Request.Path value was detected from the client (:). at System.Web.HttpRequest.ValidateInputIfRequiredByConfig() at System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext context)

which sounds like they just put a colon in the path where it shouldn't be but inspection of the IIS logs shows me this

2019-08-21 12:37:43 W3SVC3 SRVR19-WFARM201A 10.212.132.21 HEAD /https:/www.mysitedomain.com/ - 443 - 10.291.191.22 HTTP/1.1 Test+Certificate+Info - - www.mysitedomain.com 400 0 0 1733 592 203 214.61.213.19:34246

This is the only person I see issuing a HEAD HTTP command, and their user agent is odd also.

Is there anyway to gracefully handle this in ASP.NET with MVC so it doesn't get caught as a dangerous request?

asp.net
vb.net
asp.net-mvc-4
iis-8
asked on Stack Overflow Aug 22, 2019 by BlueB-Resch

0 Answers

Nobody has answered this question yet.


User contributions licensed under CC BY-SA 3.0