Developer forum

Forum » CMS - Standard features » A potentially dangerous Request.Cookies value was detected from the client

A potentially dangerous Request.Cookies value was detected from the client

Jose Caudevilla
Reply

Hello,

In my monitoring i get this error sometimes:

 

<growth ta...").
System.Web.HttpRequestValidationException (0x80004005): A potentially dangerous Request.Cookies value was detected from the client (Dynamicweb.SessionVisitor="...rDynamics=<dynamics><growth ta...").
at System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection)
at System.Web.HttpRequest.ValidateCookieCollection(HttpCookieCollection cc)
at System.Web.HttpRequest.get_Cookies()
at Dynamicweb.Environment.Web.Request.get_Cookies()
at Dynamicweb.Environment.CookieManager.GetCookieOptInLevel()
at Dynamicweb.Environment.CookieManager.CanCookieBeSet(Cookie cookie)
at Dynamicweb.Tracking.Tracker.get_Current()
at Dynamicweb.Tracking.Web.ApplicationBeforeEndRequestSubscriber.OnNotify(String notification, NotificationArgs args)
at Dynamicweb.Extensibility.Notifications.NotificationManager.Notify(String notification, NotificationArgs eventArgs)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)
" class="form-control auto-size" disabled="disabled" rows="15">2020-07-02 10:11:15.662: A potentially dangerous Request.Cookies value was detected from the client (Dynamicweb.SessionVisitor="...rDynamics=<dynamics><growth ta...").
System.Web.HttpRequestValidationException (0x80004005): A potentially dangerous Request.Cookies value was detected from the client (Dynamicweb.SessionVisitor="...rDynamics=<dynamics><growth ta...").
at System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection)
at System.Web.HttpRequest.ValidateCookieCollection(HttpCookieCollection cc)
at System.Web.HttpRequest.get_Cookies()
at Dynamicweb.Environment.Web.Request.get_Cookies()
at Dynamicweb.Environment.CookieManager.GetCookieOptInLevel()
at Dynamicweb.Environment.CookieManager.CanCookieBeSet(Cookie cookie)
at Dynamicweb.Tracking.Tracker.get_Current()
at Dynamicweb.Tracking.Web.ApplicationBeforeEndRequestSubscriber.OnNotify(String notification, NotificationArgs args)
at Dynamicweb.Extensibility.Notifications.NotificationManager.Notify(String notification, NotificationArgs eventArgs)
at System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute()
at System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step)
at System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously)

 

All work well but this message appear a lot of times.

Why this error happen ? 

 

Thanks,

Jose


Replies

 
Nicolai Pedersen
Reply

What version?

 
Jose Caudevilla
Reply

9.8.5 version

 
Nicolai Pedersen
Reply

It comes from a coookie that personalistion module is sending out.

In web.config you seem to be missing one setting that we distribute with DW. Check that out - see dump.

BR Nicolai

Capture.JPG

 

You must be logged in to post in the forum