Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Tom W 22 posts 54 karma points
    Jan 03, 2019 @ 17:11
    Tom W
    0

    mysite.com/con seems to throw a 500 exception on every Umbraco site, ever

    Has anyone ever noticed that, if you go to /con on any Umbraco site, a 500 error is thrown?

    https://umbraco.com/con

    I've searched the source code and can't find any reference to it directly. It seems to override the default routing, so doesn't throw a 404, but a 500. I guess this should be handled by customErrors but it's being ignored on most of our sites.

    Seems to affect every version. Any advice on how/why/what's going on here would be appreciated! If I find anything I'll update.

    Cheers!

  • Richard Eyres 95 posts 556 karma points
    Jan 03, 2019 @ 17:34
    Richard Eyres
    100

    Hello

    I believe that is one of the restricted urls (others are COM1-9, LPT1-9, AUX, PRT, NUL, CON)

    More info here (very old article): https://www.bitquabit.com/post/zombie-operating-systems-and-aspnet-mvc/

    I do not know if there is a way around it, as i have not encountered this as a need (it was raised in a pen test for a site i was working on a couple of years ago, and we just reported that it was restricted and please not to use them).

  • Tom W 22 posts 54 karma points
    Jan 03, 2019 @ 17:37
    Tom W
    0

    Hi Richard!

    Thanks very much. That's very helpful, and really kind of strange. I had no idea. Thanks for the link. If I do (need to) find a way around it, I'll update this post.

    Nice one! Cheers,

    Tom

Please Sign in or register to post replies

Write your reply to:

Draft