Hello,
We are facing the below issues and so the requests are blocked by Web Application Firewall(Imperva Secure Sphere Firewall).
1. Extremely Long Parameter HTTP/1.x Protocol Policy - Grid_clientState parameter value Part Size : 5132 Limit : 4096 Truncated
2: ../../ Found In : post-parameters Offset : 1022 Dictionary Name
Kindly let us know the solution to proceed further.
Thanks in Advance
Did you had the chance to see my last reply?
"Can you please confirm that the suggestion worked and after disabling the ViewState the size limit error is no longer present? If that is the case and only the editor providers issue remain, then I can suggest you to re-create the editor providers dynamically on every postback - provind some configuration code would be highly appreciated.
About the ig_res path, coud you please elaborate what exactly is the problem? The ig_res folder contains all styles for the IG controls, each style will have a sub-folder for its image. If you want to separate the images folder from ig_red, taht wount be possible. The <infragistics.web> tag do not provide aproperty to set the path for the images folder separately.
Could you please keep in mind that this Imperva firewall tool that you are using might be configured for a strict rules that we do not comply with, which means that you might consider performing some changes there as well in order to pass these checks or at least soften them.
Also, could you please share the exact version of our product that you are using?"
Kindly let us know the status of the above issue.
Thanks in advance
Can you please confirm that the suggestion worked and after disabling the ViewState the size limit error is no longer present? If that is the case and only the editor providers issue remain, then I can suggest you to re-create the editor providers dynamically on every postback - provind some configuration code would be highly appreciated.
Also, could you please share the exact version of our product that you are using?
Regards,Zdravko.
I am stuck with the firewall issues and unable to move forward. A quick response/resolution will be of great help.
Thank you
Hello, We are already using EnableAjaxViewState and EnableDataViewState to true for the webdatagrid control.
As suggested by Hristo, we have disabled them and Ediitorproviders were not loaded in the Grid.
By default, ViewState is enabled for all controls and we are not setting the ViewState to false for any of the controls.
Kindly let us know on the below for Directory Traversal Issue.
“../” is not changed even after moving ig_res folder to the directory where the page resides for one particular post variable “res”.
Please find the attached screenshot for reference.
Changes made in the code:
Reflection in Response:
The inference is that “../” in res variable in the response is not for StyleSetPath and is used for some other purpose. Image paths are not shown in the control if the images are within the folder itself.
What is the content that is getting accessed (requiring directory traversal) by this entry in the post value?
And is there a way that this directory traversal can be avoided, by using any relevant property for the control – similar to StyleSetPath property for WebDataTree control?