Extend IIS web.config to allow colons in URLs

Created on 15 July 2017, almost 7 years ago

Updated 4 May 2023, about 1 year ago

Problem/Motivation

The current web.config doesn't relax the default requestPathInvalidCharacters settings of IIS.
This means that colons (:) in URLs are classified as invalid characters.
Because of this URLs like the one from the block management (http://wl56www523.webland.ch/drupal/web/admin/structure/block/add/block_content%3Adc5f60cf-8510-4a21-b899-641571747188/bodies?region=section_first&_wrapper_format=drupal_modal) are blocked.

Proposed resolution

Add the <httpRuntime requestValidationMode="2.0" requestPathInvalidCharacters="*,%,?,\,&,<,>" /> directive to the web.config file.
This should allow colons in URLs.

Remaining tasks

This was tested with "Microsoft-IIS/7.5" and "AspNet-Version:4.0.30319" - as I'm very unfamiliar with IIS this defintitely needs a review from someone that's more familiar with that webserver.
Another open question is if the config syntax for &,<,> is valid - I had to use &,<,&gt to avoid a 500 error from IIS, and it seems like the related chars are filtered properly.
However, if this is server version / configuration specific syntax we might break installations if we simply update the web.config.

User interface changes

None

API changes

None

Data model changes

None

🐛 Bug report

Status

Closed: won't fix

Version

10.1 ✨

Component

Other →

Last updated 19 minutes ago

Created by

🇨🇭Switzerland das-peter

Live updates comments and jobs are added and updated live.

Bug Smash Initiative

Novice
It would make a good project for someone who is new to the Drupal contribution process. It's preferred over Newbie.

Needs Review Queue Initiative

Incomplete comments

Comments & Activities

Not all content is available!

It's likely this issue predates Contrib.social: some issue and comment data are missing.

Comment over 1 year ago →
🇺🇸United States smustgrave
This issue is being reviewed by the kind folks in Slack, #needs-review-queue-initiative. We are working to keep the size of Needs Review queue [2700+ issues] to around 400 (1 month or less), following Review a patch or merge request → as a guide.

Kicked off a D10 build but don't expect failures. Think this good for committers to take a look.
Status changed to Needs review over 1 year ago12:20am 20 February 2023
Comment over 1 year ago →
🇦🇺Australia larowlan 🇦🇺🏝.au GMT+10
It would be good to have this reviewed by someone who uses IIS
Comment about 1 year ago →
🇺🇸United States smustgrave
Seems we can't get anyone who uses IIS to test. How best to proceed with this ticket?
Status changed to Closed: won't fix about 1 year ago5:04pm 4 May 2023
Comment about 1 year ago →
🇺🇸United States smustgrave
See related issue.

contrib.social Blog FAQ Discussions

Production build 0.69.0 2024