but for 404 error I am stille getting the below page;
Server Error in '/' Application.
The resource cannot be found.
Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed,
had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly.
Requested URL: /edew.aspx
I tired it with other application and it worked fine but in one app. it is not working properly.
<div>1. You are running an MVC app that uses a controller / route to return the error page (IE /ErrorController/ErrorAction). RequestRewrite doesn't appear to work in this scenario as the Server.Transfer method that happens behind the scenes somehow skips the
routing pipeline, thus it can't FIND the error page and returns a 404.</div><div>
</div><div>2. Your error page, or it's master page, uses session perhaps? Server.Transfer, or something in this process, wipes the session I believe, causing your error page to error out, and thus reverting to a generic 404.</div><div>
</div><div>
</div><div>I'm not entirely sure that the ResponseRewrite is necessary, as either way you are returning the same error message for 404s and 500's (a 302 redirect to a 200 Error page). I haven't been able to get anyone to really explain why its needed, and the
attempts I've seen don't seem to explain the different observed behavior between 404 and 500 errors that using ResponseRedirect would cause...</div><div>
</div><div>
</div>
tugberk_ugur...
Participant
1944 Points
1344 Posts
MVP
asp.net valnuribility - change of customErrors section
Sep 22, 2010 01:56 PM|LINK
hi !
I have implemented all insturictuons on scott guthrie's blog for the asp.net valnuribility.
here the link;
http://weblogs.asp.net/scottgu/archive/2010/09/18/important-asp-net-security-vulnerability.aspx
but for 404 error I am stille getting the below page;
Server Error in '/' Application.
The resource cannot be found.
Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly.
Requested URL: /edew.aspx
I tired it with other application and it worked fine but in one app. it is not working properly.
here the code of custom error section;
<customErrors mode="On" redirectMode="ResponseRewrite" defaultRedirect="~/error.aspx" />
why do you think it is not working ?
tweets as @tourismgeek
hajan
Star
10655 Points
1782 Posts
Re: asp.net valnuribility - change of customErrors section
Sep 22, 2010 02:55 PM|LINK
Emm, try adding smth like this:
<customErrors mode="On" redirectMode="ResponseRewrite">
<error statusCode="404" redirect="~/error.aspx" />
</customErrors>
hmm.. what else, maybe IIS setting?
Read this: http://forums.iis.net/p/1160614/1915691.aspx
Hope this helps.
Hajan
Dont forget to Mark as Answer the answer that solved your problem!
My ASP.NET Weblog
i8beef
Member
69 Points
45 Posts
Re: asp.net valnuribility - change of customErrors section
Sep 22, 2010 02:58 PM|LINK
</div><div>2. Your error page, or it's master page, uses session perhaps? Server.Transfer, or something in this process, wipes the session I believe, causing your error page to error out, and thus reverting to a generic 404.</div><div>
</div><div>
</div><div>I'm not entirely sure that the ResponseRewrite is necessary, as either way you are returning the same error message for 404s and 500's (a 302 redirect to a 200 Error page). I haven't been able to get anyone to really explain why its needed, and the attempts I've seen don't seem to explain the different observed behavior between 404 and 500 errors that using ResponseRedirect would cause...</div><div>
</div><div>
</div>
tugberk_ugur...
Participant
1944 Points
1344 Posts
MVP
Re: asp.net valnuribility - change of customErrors section
Sep 22, 2010 03:05 PM|LINK
I guess, ı haven't looked at that
http://www.microsoft.com/technet/security/advisory/2416728.mspx
tweets as @tourismgeek
tugberk_ugur...
Participant
1944 Points
1344 Posts
MVP
Re: asp.net valnuribility - change of customErrors section
Sep 22, 2010 03:09 PM|LINK
guys, I am really freaking out. when do you thing the patch will be ready? and we need to add the path to our server? right?
tweets as @tourismgeek
Ming Xu - MS...
All-Star
25269 Points
2235 Posts
Microsoft
Re: asp.net valnuribility - change of customErrors section
Sep 27, 2010 01:15 PM|LINK
Hi,
Please check the links below,hope it can help you.
http://forums.iis.net/t/1160614.aspx
http://blogs.iis.net/rakkimk/archive/2008/10/03/iis7-enabling-custom-error-pages.aspx
https://forums.iis.net/p/1168489/1946369.aspx
Feedback to us
Develop and promote your apps in Windows Store