Re: Problems accessing a XML-file



* K Viltersten wrote in comp.lang.javascript:
I've been laborating with an external package
(ExtJS, i don't know how well known it is).
When i try to run their examples from their
site, everything works well. When i run the
same example from my local host, i get the
following error message in FireBug.

System.Web.HttpException: HTTP-verb POST used
to access the path /DynamicFeedback_test01/xm
l-form.xml is invalid (not allowed?)

Your server rejects the POST request. You have to reconfigure your
server to accept it (if that is what you want). Consult your server
manual for how to do that.

The strange thing is that when i enter this:
http://localhost/.../xml-form.xml
i get to see the file. However, when the very
same file is requested by the form, i get the
error instead.

When you enter the address in the browser's address bar, it will use
a GET request, not a POST, and your server is configured to allow the
GET request.
--
Björn Höhrmann · mailto:bjoern@xxxxxxxxxxxx · http://bjoern.hoehrmann.de
Weinh. Str. 22 · Telefon: +49(0)621/4309674 · http://www.bjoernsworld.de
68309 Mannheim · PGP Pub. KeyID: 0xA4357E78 · http://www.websitedev.de/
.



Relevant Pages

  • [REVS] NTLM HTTP Authentication is Insecure By Design
    ... in front of a web server, and that proxy server shares a single TCP ... These are attacks that make use of non-RFC HTTP requests (HTTP Request ... the authentication is associated with the ...
    (Securiteam)
  • [NT] 04WebServer Multiple Vulnerabilities (CSS, Log File Injection, AUX DoS)
    ... 04WebServer is a HTTP server developed by Soft3304 for Windows platforms. ... Characters into Log File ... filtering on the request URL before writing it into the log file. ... following HTTP request, when submitted to a vulnerable 04WebServer, will ...
    (Securiteam)
  • Re: breaking the model
    ... > The forms data then is in the Request object. ... HTTP Request; in this case, the form POST Request from the Page. ... client and server. ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Anonymous Anonymity - Request For Comments
    ... > and request that you reply directly to my e-mail address. ... > for the entity wishing to preserve their anonymity. ... > the machine can perform as a Intermediary Server and / or as a Intermediary ... > The software then attempts connection to a Intermediary Server. ...
    (Bugtraq)
  • Multiple Vulnerabilities in Sun-One Application Server
    ... Multiple Vulnerabilities in Sun-One Application Server ... on Windows 2000, SPI Labs discovered a number of vulnerabilities. ... the case of the file extension in the HTTP request. ...
    (Bugtraq)