Home » Support » Community Server » Archives » Community Server Archive (read only) » Bugs & Issues

Forums

Open Support Ticket

Call Support:
Direct: (214) 420-1337
Toll Free: (877) 522-6334

Monday through Friday
8 a.m. to 6 p.m. Central (GMT-6)

Join our Community
Details
  • 11 Replies
  • 0 Subscribers
  • Postedover 6 years ago
Options

Interesting error from blog "Cannot use a leading .. to exit above the top directory. "

  • John Hamman
    Posted by
    on Sat, Jan 28 2006 9:18 PM
    Interesting error. I beleve this is probalby from my.yahoo.com. Anyone got an idea on what might have happened?

    User Agent:     Yahoo-Blogs/v3.9 (compatible; Mozilla 4.0; MSIE 5.5; http://help
    Path: /blogs/post.aspx?App=theladderproject&y=2006&m=01&d=28&PostName=Important_initial_steps_to_income_based_blog__Part_1 as HTTP GET
    Referrer:
    Message: Cannot use a leading .. to exit above the top directory.
    System.Web.HttpException: Cannot use a leading .. to exit above the top directory.
    at System.Web.Util.UrlPath.ReduceVirtualPath(String path)
    at System.Web.Util.UrlPath.Reduce(String path)
    at System.Web.Util.UrlPath.Combine(String appPath, String basepath, String relative)
    at System.Web.HttpResponse.ApplyAppPathModifier(String virtualPath)
    at System.Web.UI.HtmlControls.HtmlForm.GetActionAttribute()
    at System.Web.UI.HtmlControls.HtmlForm.RenderAttributes(HtmlTextWriter writer)
    at System.Web.UI.HtmlControls.HtmlControl.RenderBeginTag(HtmlTextWriter writer)
    at System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output)
    at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
    at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
    at System.Web.UI.Control.Render(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
    at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
    at System.Web.UI.WebControls.WebControl.RenderContents(HtmlTextWriter writer)
    at System.Web.UI.WebControls.WebControl.Render(HtmlTextWriter writer)
    at CommunityServer.Controls.TemplatedWebControl.Render(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
    - Earn money with affiliate marketing at Affiliate Pro
  • RoyJS
    Posted by
    on Mon, Feb 27 2006 8:25 PM

    I get the same error in my logs. Did you ever discover what was causing it?

     
  • X.Static
    Posted by
    on Mon, Feb 27 2006 9:02 PM
    I recently had this error as well; all of my individual posts were throwing this error.  I added an RSS image to my category links in the skin-categorylist control via this attribute: ImageUrl="~/Themes/default/images/icon-rss.png" which apparently was causing this error on individual posts, but not on the main blog page.  So it could be related to something similar.

    Snag yourself a CS Tidbit!

    JaysonKnight.com

  • Tim Marman
    Posted by
    on Tue, Feb 28 2006 10:53 PM

    No, I'm seeing this all over the place from the yahoo slurp engine. I've seen a LOT of these messages - 2870 on /blogs/post.aspx, 1650 on /blogs/day.aspx, 450 on /blogs/postcategory.aspx - and I cleared the exception report yesterday.

    The weird thing is, if I take that reported url and copy it looks to be fine. It's only an issue, apparently, for Yahoo.com.

    User Agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/hel
    Path: /blogs/post.aspx?App=tim&y=2005&m=03&d=01&PostID=1491&pending=true as HTTP GET
    Referrer
    Message Cannot use a leading .. to exit above the top directory.
    System.Web.HttpException: Cannot use a leading .. to exit above the top directory.
    at System.Web.Util.UrlPath.ReduceVirtualPath(String path)
    at System.Web.Util.UrlPath.Reduce(String path)
    at System.Web.Util.UrlPath.Combine(String appPath, String basepath, String relative)
    at System.Web.HttpResponse.ApplyAppPathModifier(String virtualPath)
    at System.Web.UI.HtmlControls.HtmlForm.GetActionAttribute()
    at System.Web.UI.HtmlControls.HtmlForm.RenderAttributes(HtmlTextWriter writer)
    at MetaBuilders.WebControls.MasterPages.NoBugForm.RenderAttributes(HtmlTextWriter writer)
    at System.Web.UI.HtmlControls.HtmlControl.RenderBeginTag(HtmlTextWriter writer)
    at System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output)
    at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
    at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
    at System.Web.UI.Control.Render(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
    at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
    at System.Web.UI.Control.Render(HtmlTextWriter writer)
    at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
    at System.Web.UI.Control.RenderControl(HtmlTextWriter writer)
    at System.Web.UI.Co

    Any ideas?

    http://www.slashstar.com
  • RichardD
    Posted by
    on Wed, Mar 1 2006 9:52 AM
    I'm seeing exactly the same error when GoogleBot [66.249.66.232] accesses the forum.
  • John Hamman
    Posted by
    on Tue, Mar 28 2006 10:45 PM
    I am so blind... i see it now.
    What the spiders are doing is lets say they go into the page /archive/2006/03/27/131.aspx
    Then they try to back out by /archive/2006/03/27/131.aspx.../ to get to /archive/2006/03/27/
    or /archive/2006/03/ but our app doesn't let them.

    - Earn money with affiliate marketing at Affiliate Pro
  • Tim Marman
    Posted by
    on Thu, Mar 30 2006 10:53 AM

    What URL are they actually requesting? If I go to /archive/2006/03/37/131.aspx/../ or just /archive/2006/03/37/ I get a 404, not this CSException.

    If I knew what it was actually requestion, we could use a redirect module to point it to the appropriate location. This probably isn't a bad idea in general - there's no reason /archive/2006/03/27 shoudn't work, and it would if we just appended a .aspx on the end.

    The other option is a trigger in the database to ignore these if it's not a real issue.

    http://www.slashstar.com
  • John Hamman
    Posted by
    on Thu, Mar 30 2006 11:19 AM
    Ok after some research I think I have figured out what is happening. You are right about the 404 part.
    and since we get this error on pages like /blog/post.aspx then that page should be present right?
    Well here is the deal. This is a typical security error when a .NET is trying to find something that has ../ in its location. Things that throw this are "MapPaths" and hyperlinks. I have my suspicion on what is going on and where. I think its happeing in the templatewebcontrol. and I am going to try to repace all the context.Server.MapPath's with Request.PhysicalApplicationPath and see if that fixes it.
    John
    - Earn money with affiliate marketing at Affiliate Pro
  • deerchao
    Posted by
    on Wed, Apr 5 2006 10:51 AM
    Hi, johnhamman, is that done?

    Could you share your work which we all need?

    May god let you know what English I'm speaking...:D

    CS08 Simplified Chinese Language Resources Download

    CS08简体中文语言资源下载
  • TObject
    Posted by
    on Fri, Jun 2 2006 5:38 PM
    Has anybody ever found a fix for this issue?
  • joshihybrid
    Posted by
    on Fri, Jun 2 2006 11:21 PM
    put this in your web.config:

      <authentication>
        <forms cookieless="UseCookies" />
      </authentication>

    this overwrites the default behavior (the default behavior depends on the client, and doesn't work fine for the google-bot)
    and you will be fine

    Jan

    dotnet.netplaces.de

    _______
  • Naresh_Chauhan
    Posted by
    on Mon, Apr 30 2007 1:22 PM
    I tried adding "

    <forms cookieless="UseCookies" />

    "

    I still get "The 'href' property had a malformed URL: Cannot use a leading .. to exit above the top directory.. "

     

    Any other suggestions on this will be greatly appreciated.

     

    Thanks,

    Naresh

    .NET 2.0