unexpected tilde ~

[jbolty]

There have been a few threads talking about using the tilde ~, to
reference the webroot path. My problem though is handling an unexpected
tilde in a url.

this url:

http://localhost/mysite/~Default.aspx

returns this error:

Invalid file name for monitoring:
'C:\Inetpub\www root\mysite\~De fault.aspx'. File names for monitoring
must have absolute paths, and no wildcards.

And there does not seem to be anyway to trap the error and handle it
gracefully.

We are undergoing a security audit where they introduce all kinds if
crap into the url, trying to break or break into the site, and I am
getting all kinds of flack because I am not handling this error. Can
anyone help?

thanks

--
jbolty
------------------------------------------------------------------------
Posted via http://www.codecomments.com
------------------------------------------------------------------------

[Eliyahu Goldin]

You are not saying what program or code returns the error.What are you
trying to do with this url?

Eliyahu

"jbolty" <jb***********@ mail.codecommen ts.com> wrote in message
news:jb******** ***@mail.codeco mments.com...

There have been a few threads talking about using the tilde ~, to
reference the webroot path. My problem though is handling an unexpected
tilde in a url.

this url:

http://localhost/mysite/~Default.aspx

returns this error:

Invalid file name for monitoring:
'C:\Inetpub\www root\mysite\~De fault.aspx'. File names for monitoring
must have absolute paths, and no wildcards.

And there does not seem to be anyway to trap the error and handle it
gracefully.

We are undergoing a security audit where they introduce all kinds if
crap into the url, trying to break or break into the site, and I am
getting all kinds of flack because I am not handling this error. Can
anyone help?

thanks

--
jbolty
------------------------------------------------------------------------
Posted via http://www.codecomments.com
------------------------------------------------------------------------

[Juan T. Llibre]

re:

there does not seem to be anyway to trap the error and handle it gracefully.
What you should be getting is a 404...which can be "gracefully handled".

See sample at : http://asp.net.do/test/~apppath.aspx

Juan T. Llibre, asp.net MVP
aspnetfaq.com : http://www.aspnetfaq.com/
asp.net faq : http://asp.net.do/faq/
foros de asp.net, en español : http://asp.net.do/foros/
=============== =============== =====
"jbolty" <jb***********@ mail.codecommen ts.com> wrote in message
news:jb******** ***@mail.codeco mments.com...
There have been a few threads talking about using the tilde ~, to
reference the webroot path. My problem though is handling an unexpected
tilde in a url.

this url:

http://localhost/mysite/~Default.aspx

returns this error:

Invalid file name for monitoring:
'C:\Inetpub\www root\mysite\~De fault.aspx'. File names for monitoring
must have absolute paths, and no wildcards.

And there does not seem to be anyway to trap the error and handle it
gracefully.

We are undergoing a security audit where they introduce all kinds if
crap into the url, trying to break or break into the site, and I am
getting all kinds of flack because I am not handling this error. Can
anyone help?

thanks

--
jbolty
------------------------------------------------------------------------
Posted via http://www.codecomments.com
------------------------------------------------------------------------