这些对 www.mydomain.com/css/about:blank 的请求是损坏的链接还是其他内容?
我们最近在网站上实施了一个新的错误页面,该页面会向网站管理员发送包含最新服务器异常的电子邮件。我们正在运行一个 ASP.NET 4 应用程序,昨晚我们收到了很多电子邮件,都是同样的错误:
从客户端检测到潜在危险的 Request.Path 值 (:)。
这些错误我们以前见过,但奇怪的是所请求的路径。它始终是路径:
我已经搜索过不同的页面,找不到似乎指向任何此类链接的锚标记。这是我们的应用程序的问题还是其他问题?换句话说,我们需要修复什么还是忽略这些?
此外,这条路径似乎是由相同的用户一致请求的,并且经常是从他们访问的多个页面请求的。用户代理的范围从 Firefox 到 IE7 和 8。
We recently implemented a new error page on our website which sends emails to the webmaster containing the most recent server exception. We are running a ASP.NET 4 application, and last night we got many emails that were all the same error:
A potentially dangerous Request.Path value was detected from the client (:).
These errors we have seen before, but the odd thing is the path that is being requested. It is always the path:
I have scoured the different pages and can find no anchor tag that appears to point to any link like this. Is this an issue with our application or something else? In other words, do we need to fix anything or just ignore these?
Also, this path was requested consistently, seemingly by the same users, and often was requested from multiple pages they visited. User-agents ranged from Firefox to IE7 and 8.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
你有没有在你的CSS中做过类似的事情:background-image:url(about:blank);
然而,这不应该生成 http 请求,所以我怀疑你可能在那里有一个 ./about:blank 。
Have you done anything like this in your css: background-image:url(about:blank);
This shouldn't generate a http request however so I suspect you might have maybe a ./about:blank in there instead.