Sending malicious characters in the GET request Like ' :

Prathap G

Hi All,

I am having one error like HTTP 404 Error,

Like whenever we enter in URL at ' Singlcotes ' and Collan : getting below error,

I recomended to create Custom error page for all exceptions conditions ,So for any http error codes that are not 200 OK.

Could you please help me on this, what type of configurations needed for this error. and where exactly we need add those type of configurations. Please give me the solutions.

For example: https://www.c-sharpcorner.com/forums' Getting below error.

Server Error in '/' Application.

The resource cannot be found.

Description: HTTP 404. The resource you are looking for (or one of its dependencies) could have been removed, had its name changed, or is temporarily unavailable. Please review the following URL and make sure that it is spelled correctly.

Requested URL: /Sonar'

Thanks,

Pratap.

9 Replies

Know the answer? Post it — somebody with the same question will find it here.

Prathap G5y ago
Hi Sachin,

Hope you are doing good!

Could you please help me on below replay. it is more help for me.

Thanks&Regards,
Pratap.
+1
Prathap G5y ago
Hi Sachin,

Hope you are doing good!!

I tried you gave below steps,

But i am unable to created view respective controller action method.

I am not getting above AddView option in my Solution Explorer. I don't know why, Please give me any suggestions.

I created Error controller and add id is parameter and same parameter I used in model then I call the model in View like @Uisng but I not getting the solution name. Could you please help me.

Could you please post the view code and how to display the one custom error message in all malicious characters?

It's like

@{
ViewBag.Title="Index";
}

@{
Var data= ViewBag.Message;
Id: @data.id
}

----->I think I need to display error message, I am confused about where I need to write code. please help me.

Regards,
Pratap.
+1
Guest User5y ago
https://www.sans.org/reading-room/whitepapers/detection/paper/34067
+1
Sachin Singh5y ago
Hii pratap

do it step by step as

Step 1. web.Config
"On" defaultRedirect="~/ErrorController/ErrorView">

    "~/ErrorController/ErrorView/400" statusCode="404" />

    "~/ErrorController/ErrorView/500" statusCode="500" />
Step 2. Inside App_Start open up FilterConfig.cs and comment out the error handling filter.

public static void RegisterGlobalFilters(GlobalFilterCollection filters)

{

    // Remove this filter because we want to handle errors ourselves via the ErrorPage controller

    //filters.Add(new HandleErrorAttribute());

}
Step 3.Design View with satatus code you get (you will automatically get due to web config settings)

public class ErrorController : Controller

{

    public ActionResult ErrorView(int id)

    {

         Viewbag.StatusCode=id;



        return View();

    }

}
+2
Prathap G5y ago
Hi Sachin,

Hope you are doing Good!!

I tried as you mentioned below Comments.

I created one Error controller and created one Index view, in this view how can pass controller data to respective view.

Then we have two more methods in error controller,earlier you given comments like no need to create view for each error, what i need to include code in view page.

I create model string error property like
Public string error {set; get;} is this correct, else if i am wrong please coorect me.

Could you please help me on how we can create one view. and give me suggestions.

public class ErrorController : Controller
{
// GET: Error
public ActionResult Index()
{
ViewBag.Message = "Error Occured due to some issue";
return View("Error");
}

public ActionResult Unauthorized()
{
ViewBag.Message = "Error 401 Occured due to some issue";
return View("Error401");
}

public ActionResult NotFound()
{
ViewBag.Message = "Error 404Occured due to some issue";
return View("Error404");
}
}

Regards,
Pratap.

0
Sachin Singh6y ago
@Pratap
please add the code in web.config and create controller Action as usual.
+1
Prathap G6y ago
Hi Sachin,

Where i need to add this below mentioned code,and no need to add any configurations files.?

If we need to add any configurations please post that code,and please help me on string error type property.

could you Please help me on this.

"On" defaultRedirect="~/Error">
"401" redirect="~/Error/Unauthorized" />
"404" redirect="~/Error/NotFound" />
+2
Sachin Singh6y ago
Hii pratap follow below steps and if feel any problem then let me know
"On" defaultRedirect="~/Error">

  "401" redirect="~/Error/Unauthorized" />

  "404" redirect="~/Error/NotFound" />
and then create a custom error controller
public class ErrorController

{

    public ActionResult Index ()

{

  return View ("Error");

}



    public ActionResult Unauthorized ()

{

  return View ("Error401");

}



    public ActionResult NotFound ()

{

  return View ("Error404");

    }

}

Note:- You need not to create separate view for each error , you can create a Model with string error type
property , and pass it in view or you can also create viewbag and pass it to view.I have just given you an idea.
+3
Vikas Jha6y ago
Please put the Quote on both side of url (Static part). If still facing , u can post ur full GET method, So that we can help
0

Sending malicious characters in the GET request Like ' :

Id: @data.id