Interesting error from blog "Cannot use a leading .. to exit above the top directory. "

Interesting error. I beleve this is probalby from my.yahoo.com. Anyone got an idea on what might have happened?

User Agent: Yahoo-Blogs/v3.9 (compatible; Mozilla 4.0; MSIE 5.5; http://help
Path: /blogs/post.aspx?App=theladderproject&y=2006&m=01&d=28&PostName=Important_initial_steps_to_income_based_blog__Part_1 as HTTP GET
Referrer:
Message: Cannot use a leading .. to exit above the top directory.
System.Web.HttpException: Cannot use a leading .. to exit above the top directory.
at System.Web.Util.UrlPath.ReduceVirtualPath(String path)
at System.Web.Util.UrlPath.Reduce(String path)
at System.Web.Util.UrlPath.Combine(String appPath, String basepath, String relative)
at System.Web.HttpResponse.ApplyAppPathModifier(String virtualPath)
at System.Web.UI.HtmlControls.HtmlForm.GetActionAttribute()
at System.Web.UI.HtmlControls.HtmlForm.RenderAttributes(HtmlTextWriter writer)
at System.Web.UI.HtmlControls.HtmlControl.RenderBeginTag(HtmlTextWriter writer)
at System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer)
at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
at System.Web.UI.Control.Render(HtmlTextWriter writer)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer)
at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
at System.Web.UI.WebControls.WebControl.RenderContents(HtmlTextWriter writer)
at System.Web.UI.WebControls.WebControl.Render(HtmlTextWriter writer)
at CommunityServer.Controls.TemplatedWebControl.Render(HtmlTextWriter writer)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)

I get the same error in my logs. Did you ever discover what was causing it?

 

I recently had this error as well; all of my individual posts were throwing this error.  I added an RSS image to my category links in the skin-categorylist control via this attribute: ImageUrl="~/Themes/default/images/icon-rss.png" which apparently was causing this error on individual posts, but not on the main blog page.  So it could be related to something similar.

No, I'm seeing this all over the place from the yahoo slurp engine. I've seen a LOT of these messages - 2870 on /blogs/post.aspx, 1650 on /blogs/day.aspx, 450 on /blogs/postcategory.aspx - and I cleared the exception report yesterday.

The weird thing is, if I take that reported url and copy it looks to be fine. It's only an issue, apparently, for Yahoo.com.

User Agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/hel
Path: /blogs/post.aspx?App=tim&y=2005&m=03&d=01&PostID=1491&pending=true as HTTP GET
Referrer
Message Cannot use a leading .. to exit above the top directory.
System.Web.HttpException: Cannot use a leading .. to exit above the top directory.
at System.Web.Util.UrlPath.ReduceVirtualPath(String path)
at System.Web.Util.UrlPath.Reduce(String path)
at System.Web.Util.UrlPath.Combine(String appPath, String basepath, String relative)
at System.Web.HttpResponse.ApplyAppPathModifier(String virtualPath)
at System.Web.UI.HtmlControls.HtmlForm.GetActionAttribute()
at System.Web.UI.HtmlControls.HtmlForm.RenderAttributes(HtmlTextWriter writer)
at MetaBuilders.WebControls.MasterPages.NoBugForm.RenderAttributes(HtmlTextWriter writer)
at System.Web.UI.HtmlControls.HtmlControl.RenderBeginTag(HtmlTextWriter writer)
at System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer)
at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
at System.Web.UI.Control.Render(HtmlTextWriter writer)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer)
at System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children)
at System.Web.UI.Control.RenderChildren(HtmlTextWriter writer)
at System.Web.UI.Control.Render(HtmlTextWriter writer)
at System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter)
at System.Web.UI.Control.RenderControl(HtmlTextWriter writer)
at System.Web.UI.Co

Any ideas?

I'm seeing exactly the same error when GoogleBot [66.249.66.232] accesses the forum.

I am so blind... i see it now.
What the spiders are doing is lets say they go into the page /archive/2006/03/27/131.aspx
Then they try to back out by /archive/2006/03/27/131.aspx.../ to get to /archive/2006/03/27/
or /archive/2006/03/ but our app doesn't let them.

What URL are they actually requesting? If I go to /archive/2006/03/37/131.aspx/../ or just /archive/2006/03/37/ I get a 404, not this CSException.

If I knew what it was actually requestion, we could use a redirect module to point it to the appropriate location. This probably isn't a bad idea in general - there's no reason /archive/2006/03/27 shoudn't work, and it would if we just appended a .aspx on the end.

The other option is a trigger in the database to ignore these if it's not a real issue.

Ok after some research I think I have figured out what is happening. You are right about the 404 part.
and since we get this error on pages like /blog/post.aspx then that page should be present right?
Well here is the deal. This is a typical security error when a .NET is trying to find something that has ../ in its location. Things that throw this are "MapPaths" and hyperlinks. I have my suspicion on what is going on and where. I think its happeing in the templatewebcontrol. and I am going to try to repace all the context.Server.MapPath's with Request.PhysicalApplicationPath and see if that fixes it.
John

Hi, johnhamman, is that done?

Could you share your work which we all need?

Has anybody ever found a fix for this issue?

put this in your web.config:

  <authentication>
    <forms cookieless="UseCookies" />
  </authentication>

this overwrites the default behavior (the default behavior depends on the client, and doesn't work fine for the google-bot)
and you will be fine

Jan

dotnet.netplaces.de

_______

I tried adding "

<forms cookieless="UseCookies" />

"

I still get "The 'href' property had a malformed URL: Cannot use a leading .. to exit above the top directory.. "

 

Any other suggestions on this will be greatly appreciated.

 

Thanks,

Naresh