Sign in Register
Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Tom W 39 posts 96 karma points
    Jan 03, 2019 @ 17:11
    Tom W
    0

    mysite.com/con seems to throw a 500 exception on every Umbraco site, ever

    Has anyone ever noticed that, if you go to /con on any Umbraco site, a 500 error is thrown?

    https://umbraco.com/con

    I've searched the source code and can't find any reference to it directly. It seems to override the default routing, so doesn't throw a 404, but a 500. I guess this should be handled by customErrors but it's being ignored on most of our sites.

    Seems to affect every version. Any advice on how/why/what's going on here would be appreciated! If I find anything I'll update.

    Cheers!

    Copy Link
  • Richard Eyres 98 posts 580 karma points
    Jan 03, 2019 @ 17:34
    Richard Eyres
    100

    Hello

    I believe that is one of the restricted urls (others are COM1-9, LPT1-9, AUX, PRT, NUL, CON)

    More info here (very old article): https://www.bitquabit.com/post/zombie-operating-systems-and-aspnet-mvc/

    I do not know if there is a way around it, as i have not encountered this as a need (it was raised in a pen test for a site i was working on a couple of years ago, and we just reported that it was restricted and please not to use them).

    Copy Link
  • Tom W 39 posts 96 karma points
    Jan 03, 2019 @ 17:37
    Tom W
    0

    Hi Richard!

    Thanks very much. That's very helpful, and really kind of strange. I had no idea. Thanks for the link. If I do (need to) find a way around it, I'll update this post.

    Nice one! Cheers,

    Tom

    Copy Link

  • This forum is in read-only mode while we transition to the new forum.

    You can continue this topic on the new forum by tapping the "Continue discussion" link below.

Please Sign in or register to post replies