Protocol Violation

Originally Posted by Kevinyy

ive already tried that, still same outcome :(

Originally Posted by Steven Cheng(OTHER SITE)

From your description, you're using the HttpWebRequest component to send
some http request to some external web resource in your ASP.NET web
application. However, you're always getting the "The server committed a
protocol violation. Section=ResponseStatusLine" error unless you set the
following section in the web.config file:

==========
<system.net>
<settings>
<httpWebRequest useUnsafeHeaderParsing="true" />
</settings>
</system.net>
==========

and you're wondering the cause of this behavior ,correct?

As for this issue, I've performed some research on this and found that the
problem is actually caused by the critical http header parsing/validating
of the HttpWebRequest component. According to the Http
Specification(http1.1), the HTTP header keys shoud specifically not include
any spaces in their names. However, some web servers do not fully respect
standards they're meant to. Applications running on the Dotnet framework
and making heavy use of http requests usually use the httpWebRequest class,
which encapsulates everything a web oriented developer could dream of. With
all the recently issues related to security, the "httpWebRequest" class
provides a self protection mechanism preventing it to accept HTTP answers
which not fully qualify to the specifications.

The common case is having a space in the "content-length" header key. The
server actually returns a "content length" key, which, assuming no spaces
are allowed, is considered as an attack vector (HTTP response split
attack), thus, triggering a "HTTP protocol violation error" exception.


And it is possible since the 1.1 SP 1 DotNet version to disable this error
check. Fortunately, DotNet allows you to modify some parameters directly
through a simple text configuration file . and that's just the setting
you mentioned ealier in your message.

<configuration>
<system.net>
<settings>
<httpWebRequest useUnsafeHeaderParsing="true" />
</settings>
</system.net>
</configuration>

Hope this helps clarify this problem some.

Sincerely,

Steven Cheng

Microsoft MSDN Online Support Lead

Originally Posted by joedeene

*THE FOLLOWING IS A POST FROM A DIFFERENT USER ON A DIFFERENT FORUM TO SEE THE LINK PLEASE PM ME:



so it sounds similar to your problem, if your using asp.net, if not try typing the error code in google...

joedeene

**i take no credit for the work of "Steven Cheng"

Originally Posted by Kevinyy

how do i add this modification? (useUnsafeHeaderParsing="true|false")
C#.Net2.2

Originally Posted by Plater

According to HTTP protocol, all responses to a web request should start something like this:
"HTTP/1.1 200 OK"+(newline)

The error occurs when, for some servers, when serving up a certain type of file (varriable, depending on how the server software was built, or software age), that line is left out. I had the same errors in a program I wrote, because I forgot to include that line for some special AJAX pages.

As to how to fix it, looks like you found that. The statement looks like it would go somewhere in either the web.config file.

Originally Posted by Kevinyy

Im writing a windows app. and i dont have a web.config file to amend, what should i do?

Originally Posted by Plater

Well I honesty am not sure where you would put this code, somewhere that happens at the begining of the program I would think

Originally Posted by Kevinyy

no prevail! It still happens..gah this is soo fustrating :(
...and why does youtube.com throw a 400 error?

Originally Posted by insertAlias

A 400 Error is a bad request...

Originally Posted by Plater

Well I honesty am not sure where you would put this code, somewhere that happens at the begining of the program I would think

Originally Posted by Kevinyy

Is there a certain way to use this? i added the reference to System.Net.Configuration, and i placed that code in the beginning of the program, would i have to change my program more to make use of that configuration?