Extend IIS web.config to allow colons in URLs

Open on Drupal.org →

Created on 15 July 2017, over 7 years ago

Updated 13 August 2024, 4 months ago

Problem/Motivation

The current web.config doesn't relax the default requestPathInvalidCharacters settings of IIS.
This means that colons (:) in URLs are classified as invalid characters.
Because of this URLs like the one from the block management (http://wl56www523.webland.ch/drupal/web/admin/structure/block/add/block_content%3Adc5f60cf-8510-4a21-b899-641571747188/bodies?region=section_first&_wrapper_format=drupal_modal) are blocked.

Proposed resolution

Add the <httpRuntime requestValidationMode="2.0" requestPathInvalidCharacters="*,%,?,\,&,<,>" /> directive to the web.config file.
This should allow colons in URLs.

Remaining tasks

This was tested with "Microsoft-IIS/7.5" and "AspNet-Version:4.0.30319" - as I'm very unfamiliar with IIS this defintitely needs a review from someone that's more familiar with that webserver.
Another open question is if the config syntax for &,<,> is valid - I had to use &,<,&gt to avoid a 500 error from IIS, and it seems like the related chars are filtered properly.
However, if this is server version / configuration specific syntax we might break installations if we simply update the web.config.

User interface changes

None

API changes

None

Data model changes

None

🐛 Bug report

Status

Closed: won't fix

Version

10.1 ✨

Component

Last updated about 1 hour ago

Created by

🇨🇭Switzerland das-peter

Live updates comments and jobs are added and updated live.

Bug Smash Initiative

Novice
It would make a good project for someone who is new to the Drupal contribution process. It's preferred over Newbie.

Needs Review Queue Initiative
Used to track the progress of issues reviewed by the Drupal Needs Review Queue Initiative.

Incomplete comments

Sign in to follow issues

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment almost 2 years ago →
🇺🇸United States smustgrave
This issue is being reviewed by the kind folks in Slack, #needs-review-queue-initiative. We are working to keep the size of Needs Review queue [2700+ issues] to around 400 (1 month or less), following Review a patch or merge request → as a guide.

Kicked off a D10 build but don't expect failures. Think this good for committers to take a look.
Status changed to Needs review almost 2 years ago12:20am 20 February 2023
Comment almost 2 years ago →
🇦🇺Australia larowlan 🇦🇺🏝.au GMT+10
It would be good to have this reviewed by someone who uses IIS
Comment over 1 year ago →
🇺🇸United States smustgrave
Seems we can't get anyone who uses IIS to test. How best to proceed with this ticket?
Status changed to Closed: won't fix over 1 year ago5:04pm 4 May 2023
Comment over 1 year ago →
🇺🇸United States smustgrave
See related issue.
Comment 4 months ago →
🇳🇿New Zealand quietone
Adding what I think is the related issue mentioned in the previous comment.

contrib.social Blog FAQ Discussions

Production build 0.71.5 2024