server error 404 on umbraco dashboard - Contour

Press Ctrl / CMD + C to copy this to your clipboard.

Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at

Sean Oldfield 4 posts 24 karma points

Sep 25, 2015 @ 15:53

Server Error - 404 on Umbraco Contour Dashboard

When opening the contour dashboard in the umbraco backoffice I keep receiving a 404 server error in a modal popup.

It looks as if the code in the file:

\Umbraco\Plugins\umbracoContour\FormsDashboard.ascx

is making a ajax call to a dead link within the umbraco docs:

<script type="text/javascript">

jQuery(function() {

    jQuery.ajax({
        type: 'GET',
        url: '<% if (CompatibilityHelper.IsVersion7OrNewer){ %>../<% } %>plugins/umbracocontour/feedproxy.aspx?url=http://umbraco.org/documentation/videos/umbraco-pro/contour/feed',
        dataType: 'xml',
        success: function(xml) {


            var html = "<div class='tvList'>";

            jQuery('item', xml).each(function() {

                html += '<div class="tvitem">'
                + '<a target="_blank" href="'
                + jQuery(this).find('link').eq(0).text()
                + '">'
                + '<div class="tvimage" style="background: url(' + jQuery(this).find('thumbnail').attr('url') + ') no-repeat center center;">'
                + '</div>'
                + jQuery(this).find('title').eq(0).text()
                + '</a>'
                + '</div>';
            });

            html += "</div>";

            jQuery('#latestformvids').html(html);
        }

    });



});

When this is removed the error stops, just thought id put this here if anyone else runs into the same issue

Copy Link

Comment author was deleted

Sep 28, 2015 @ 08:22

Thanks for reporting! We recently upgraded the site and must have done something wrong which ended up in removal of that feed.

Copy Link
Regin Larsen 3 posts 24 karma points

Sep 28, 2015 @ 13:59

0

Maybe it's an idea to remove or replace feedproxy.aspx altogether, because malicious users could actually make use of it for making requests through your server. Unfortunately there doesn't seem to be any restrictions on which URL's that can be requested through the feedproxy.

E.g. it's possible to request google.com by using: http://www.example.org/umbraco/plugins/umbracocontour/feedproxy.aspx?url=http://www.google.com (replace example.org with a domain where Umbraco Contour is installed).

/ Regin

Copy Link
is working on a reply...

Please Sign in or register to post replies