Dangerous querystring

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I create an encrypted string and when this string is pass into a querystring
to an ASP.Net page I have an error message that said that this querystring is
potentialy dangerous.

Here is an example of a querystring to reproduce the problem :

?var=ONmYtVKAnXuZg%3d

Do you have any idea why this string is dangerous ?
 
sylvain said:
I create an encrypted string and when this string is pass into a
querystring to an ASP.Net page I have an error message that said that
this querystring is potentialy dangerous.

Here is an example of a querystring to reproduce the problem :

?var=ONmYtVKAnXuZg%3d

Do you have any idea why this string is dangerous ?
Click to expand...

It's probably the "=on" part of it. The regular expression that is used in
ASP.NET's source will fail on that.
 
asp.net looks for injection statements for people that don't code well. you
can turn this off in you web config (validateRequest=false).

-- bruce (sqlwork.com)
 
or you can encode the string before passing. (We Chinese developer nearly
always face the problem here, some Chinese character have the 2nd byte
contains character that'll make the ASP.NET handler panics - i.e.: raise the
above exception :P)
 
Back
Top