find a location for property in a new city

Thursday, 28 February 2013

The request filtering module is configured to deny a request that contains a double escape sequence

In IIS 7.5 I have a site that contains a page that takes an encrypted part of a URL. This encrypted string includes a plus sign '+' which causes IIS to throw a "HTTP Error 404.11 - Not Found" error stating "The request filtering module is configured to deny a request that contains a double escape sequence."

The problem is that a + sign used to be acceptable in earlier versions of IIS so these URLs need to remain for legacy reasons. So, I need to make them allowed again in IIS.

The quick fix

This can be easily achieved with a simple web.config change:

<system.webServer>
    <security>
        <requestFiltering allowDoubleEscaping="true" />
    </security>
</system.webServer>

This allows URLs to contain this plus symbol '+'.

The warning

There are consequences to this which unsurprisingly are security related so please read Double Encoding to familiarise yourself with the risk for your situation. If it is a risk to you maybe the best solution is to redesign those URLs?

Follow britishdev on Twitter

58 comments:

  1. Thanks a lot, that helped.

    ReplyDelete
    Replies
    1. You managed to hit the nail upon the top and also defined out the whole thing without having side effect , people could take a signal. Will likely be back to get more. Thanks
      Tangki Panel


      Tangki Fiberglass

      Jual Septic Tank

      Delete
  2. Great tutorial,you have explained about HTTP Error 404,which i found very interesting to read.I must say you have work hard in making this post.
    buy switch board matting in different sizes from http://switchboardmattingco.co.uk/

    ReplyDelete
  3. All the best blogs that is very useful for keeping me share the ideas
    of the future as well this is really what I was looking for, and I am
    very happy to come here. Thank you very much
    earn to die
    earn to die 2
    earn to die 3
    Hi! I’ve been reading your blog for a while now and finally got the
    earn to die 4
    courage to go ahead and give youu a shout out from
    earn to die 6
    Austin Texas! Just wanted to tell
    earn to die 5
    you keep up the fantastic work!my weblog
    age of war
    Hi! I’ve been reading your blog for a while now and finally got the
    happy wheels
    strike force heroes
    slither io
    slitherio
    good game empire

    ReplyDelete
  4. The best space for your child to relax!: wingsio | slither io | abc

    ReplyDelete
  5. Let’s keep are safe place to play the very best free games for kids! Please click:
    slither.io | wings.io | happy wheels | abcya | happy wheels the game free | pokemon go to play for free games for kids!

    ReplyDelete

  6. Thanks for posting this useful content, Good to know about new things here, Let me share this, . Hadoop training in pune

    ReplyDelete
  7. Nice Blog.Thank you for Sharing. We are leading erp software software solution providers in chennai. For more details call +91 9677025199. erp software in chennai | erp providers in chennai | online events registration

    ReplyDelete
  8. Your topic is very great and useful for us…thank you

    lennyfacetext.com

    ReplyDelete
  9. I was working and suddenly I visits your site frequently and recommended it to me to read also. The writing style is superior and the content is relevant. Thanks for the insight you provide the readers!
    www.appbaixar.com

    ReplyDelete
  10. I was very impressed by this post, this site has always been pleasant news. Thank you very much for such an interesting post. Keep working, great job! In my free time, I like play game: vex3game.com. What about you?

    ReplyDelete
  11. This blog is so nice to me. I will continue to come here again and again. Visit my link as well. Good luck
    cara menggugurkan hamil
    cara menggugurkan kandungan

    ReplyDelete
  12. I found a lot of interesting information here. A really good post
    WebDesign Lüdenscheid

    ReplyDelete

  13. I have read this above post its very nice for us thanks sharing ,great post.
    http://catmario.games

    ReplyDelete
  14. This is really a pleasant and useful, containing all data furthermore greatly affect the new innovation. Much obliged for sharing it,
    Avriq India
    Avriq
    AVRiQ - Data Recovery
    AVRiQ Crunchbase
    Avriq Services
    Avriq Us

    ReplyDelete
  15. Great post!! very informative.
    Thank you very much for such a lovely and informative post.

    http://word-cookies-answers.com

    ReplyDelete
  16. I love to see you have written this content very Well and want to write more so people will aware of this issue
    I have some favorite game Blogs as well like
    ||Happy Wheels at happywheels.in||
    ||Happy wheels game at classic happy wheels game||
    ||Happy Wheels demo at happy wheels||
    ||Fireboy and watergirl at fireboywatergirl.co||

    ReplyDelete
  17. a pride for me to be able to discuss on a quality website because I just learned to make an article on
    cara menggugurkan kandungan

    ReplyDelete
  18. I would like to say thank you for the amazing blog.
    online movie

    ReplyDelete
  19. cara menggugurkan hamil kandungan dengan cepat dan akurat terbukti ampuh untuk melunturkan janin kehamilan muda 1 minggu hingga 1 , 2 , 3 dan 4 bulan
    obat penggugur kandungan adalah suatu bentuk proses berakhirnya kehamilan dengan dikeluarkannya janin ( fetus ) atau embrio sebelum memiliki kemampuan untuk berkembang dan bertahan hidup diluar rahim , sehingga bisa menyebabkan kematiannya pada janin
    Disini akan kami beritahukan kepada Anda langkah cara cepat menggugurkan kandungan dengan cepat dan selamat adalah KURET dan obat aborsi
    Kunyit memang tidak di baik di konsumsi oleh ibu hamil yang sedang hamil muda sehubungan dengan sifatnya untuk melancarkan haid , dan di percayai sebagai obat telat datang bulan
    jual obat aborsi paling manjur Misiprostol Cytotec asli terbukti ampuh melunturkan janin kuat tanpa kuret dengan bersih untuk usia 1 , 2 , 3 sampai 4 bulan dengan aman

    ReplyDelete
  20. You're really something special. vidmate and You're so thoughtful Looking For More Posts

    ReplyDelete
  21. I have read lots of articles but this article really provide great information. I thanks to author to provide such a informative pageVidMate app supports over 200 platforms to download movies and videos.

    ReplyDelete
  22. Motifz Designer Lawn. 1, 2 & 3 Piece Unstitched Premium Embroidered Lawn 2019, Premium Lawn, Lawn 2019, Best lawn collection, Motifz, Best Lawn in Pakistan, Shipping worldwide. Stitching option available.

    ReplyDelete
  23. Buy Premium lawn Online for Women's at best prices available at Motifz. ✓ Latest Fashion, ✓ Trendy Designs ➤ Shop Now!

    ReplyDelete
  24. Vidmate App is the best app that lets you download videos and songs from YouTube, Facebook, Twitter, etc and various other sites.

    ReplyDelete
  25. Thanks for your sharing. For Vidmate, you may also download from its official website,www.vidmateapp.comVidmate apk download

    ReplyDelete
  26. Our company team initially visits the client in order to inspect and inspect the furniture.
    We provide all transportation services from transport vehicles and transport cranes which transfer the baggageشركة نقل عفش
    شركة نقل اثاث من الرياض الى جدة

    شركة نقل عفش من الرياض الى جدة
    شركة نقل عفش بخميس مشيط

    ReplyDelete
  27. Thank you so much for sharing such an amazing blog with us. Ogen Infosystem provides one of the best Website Development and SEO Services in Delhi.
    Website Development Company

    ReplyDelete
  28. Good Job you Are sharing Such a effective and informative stuff
    clash of magic
    clash of magic Apk

    ReplyDelete
  29. An electric skateboard can actually be defined as a personal transporter, which is primarily based on a skating board. Since it is electric or pure energy electric skateboard motorized, weight sensor controls or handheld throttle are used in controlling its speed.

    ReplyDelete
  30. Give me a chance to clear that, I am discussing the private servers which host been facilitated by the third gathering and not the supercell. Also, outstanding Hack of clash of clans amongst other private servers is the conflict of groups enchantment.

    ReplyDelete