Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

DLLs getting downloaded in IIS 7.5 when the Error page Feature Settings has Custom Error pages set

$
0
0

Hello,

This is related to setting custom error pages in IIS 7.5

We have an application, wherein we have custom Error pages, for 404 and 500 respectively.

Lets take the default case for error code 500:

Open IIS Manager, goto my Website -> Error Pages

  1. File Path - %SystemDrive%\inetpub\custerr\<LANGUAGE-TAG>\500.htm -- Actions pane -> Edit option
  2. Error Responses - Detailed errrors for local requests and custom error pages for remote requests -- Actions pane -> Edit Feature Settings option

Till this time everything is working perfectly fine!

Now, we have custom error page to set.

So what I do is, go to Actions pane, and make the following changes for Error code 500:

  1. Url - /Errorpages/SpecificErrorpage.aspx -- Actions pane -> Edit option
  2. Error Responses - either keep the same i.e. "Detailed errrors for local requests and custom error pages for remote requests" or make it "Custom Error Pages" -- Actions pane -> Edit Feature Settings option

And now, you can open your website and DLL, 

i.e. http://mywebsite/bin/MyDll.dll

it will ask to be downloaded.

Is this not wrong?

Eagerly awaiting response!

Regards,

Varun Shringarpure


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>