The page at about:blank displayed insecure content - asp.net

I got the following warning & error by the chrome browser while trying to access my webpage via https.
Warning: The page at about:blank displayed insecure content from http://subdomain.name.dns-stuff.com/go.php?sid=mix.
Error: Failed to load resource: the server responded with a status of 404 (Not Found)
Should i start worrying?
How can i find where this insecure content comes from?
UPDATE: A malicious IFRAME can source in content from web pages that attempt to fingerprint and exploit a browser vulnerability or client/OS vulnerability to cause a drive-by-download. Such IFRAMEs are typically invisible to users.
http://wam.dasient.com/wam/infection_library/917395c589f265fd940fc7cc9b0df341/dns-stuff

After contacting the hosting provider of mine they managed to find that the webpage was infected. Actually a part of the jquery.js was infected.
Lessons learned.
Never download the jquery libraries (or anything) from any place of the web, except the official ones.
Keep up to the latest versions via links to the official sites.

The 404 or Not Found error message is a HTTP standard response code indicating that the client was able to communicate with the server, but the server could not find what was requested.
So when you try to access http://www.dns-stuff.com you will see that the domain is live and returning content however when you try http://www.dns-stuff.com/go.php?sid=mix you will see the 404 error which means the content should return by calling "go.php?sid=mix", is not available and error 404 shows this message. So you just need to know that the content is missing while the server is still responding.
Edited:
According to Google Error 404 is the second most occurring error!!

Related

iframe in Chrome doesn't work when a 404 NOT FOUND is returned, but does for 200

I have a simple iframe on a page showing a SharePoint library. Don't go telling me to post this over on SharePoint board, ignore that for now.
The page will return a 404 NOT FOUND but SharePoint displays a pretty Page Not Found page (of which we've customized). When this happens, the users cannot see the content of the iframe. Chrome errors with:
Failed to load resource: the server responded with a status of 404 (NOT FOUND)
Once the file has been placed in SharePoint, and the 404 is fixed, then they can see the contents of the iframe.
The big problem is that this is working on my computer, I see the SP Page Not Found error, no one else does. I don't know why. We've since added both the parent site and SharePoint to the Trusted Sites in Internet Options but it still doesn't work. Assuming there is nothing needed to be changed on the HTML of the parent page or SharePoint, what on the client computers need to be changed?

Manually added WebResource.axd - Any security implications?

I added WebResource.axd (empty file) manually in production environment (IIS7 and Windows Server 2008) after chrome and firefox was giving error 404 for WebResource.axd. And now it is working fine, even with parameters. I am not sure why ASP.NET generating this script in final render result (no problem with VS2008), but now it is working. I want to know, is there any security implications other than what normally associated with WebResource.axd as it is in root directory?
Thanks
I also had this issue recently, after a code change WebResource.axd stopped working for my site. Basically, it exposes dynamic resources over http. For a longer explanation visit:
Just where is webresource.axd?
Typically, what happens is that one of the dynamic resources being requested has failed, but the resource name is encrypted. This blog post will help you decrypt the name, use it and the query string of your failing webresource.axd?___ request to figure out where the error is coming from.
Telerik webresource troubleshooting

Sitecore uses "302 found" to redirect users to my custom 404 page - is that legitimate?

This is more of a HTTP spec question than a Sitecore question.
I have a 404 error page set up in Sitecore:
<setting name="ItemNotFoundUrl" value="/404.aspx" />
So, when a user accesses a non-existent page (e.g. www.example.com/xyz) they get redirected to my custom 404 page (e.g. www.example.com/404.aspx).
Sitecore performs the redirect using a 302 as seen in the Firebug screenshot below:
Is this a problem? i.e. will Google and other search engines index my 404 page at the URL www.example.com/xyz? The site in question was originally set up to return "200 OK" responses from the 404 page (bad!) and so search engines have been indexing the sites 404 page whenever they've found a broken link into the site.
I'd assume that since 302 is just a redirect, the status code at the final (custom 404) URL will be what any client is supposed to assume applies to the initial (redirecting) URL.
If this isn't a problem, what's the canonical spec / documentation that makes that clear?
As well as what Ruud has suggested, there was a blog post by Kern Herskind that uses a Sitecore/IIS approach without having to write any additional code.
As already mentioned correct http response headers are vital, not only for SEO but many other use cases.
There's a Sitecore Shared Source module called "Sitecore Error Manager" which makes your Sitecore installation respond with the correct 404 header and comes with a couple of other features like configuring any other error response, even for the Sitecore media library (i.e. pdf files), multilanguage support etc.
Sitecore Marketplace: http://marketplace.sitecore.net/en/Modules/Sitecore_Error_Manager.aspx
Github: https://github.com/unic/SitecoreErrorManager
That is a problem indeed. Because google will now think the 404.aspx page does not exist and will think the non-existing item is temporarily redirected.
I came up with a solution for this and blogged about it here.
What it does basically is determine that the item is non-existing (through a pipeline processor), then retrieve the contents of the 404 page by requesting it using a WebRequest and return that contents to the browser with a 404 status code.

Make search bots to not crawl a deleted page?

Currently we are using a Kentico CMS for out web site and we used to have a page called pages/page1.aspx. We removed that page but every day the google, bing and yahoo sarch robot tries to read that page. Because the page doesn't exist the CMS throws the following error (in the log)
Event URL: /pages/page1.aspx
URL referrer:
User agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
Message: The file '/pages/page1.aspx' does not exist.
Stack Trace:
at System.Web.UI.Util.CheckVirtualFileExists(VirtualPath virtualPath)
// and the rest of the stacktrace
When we get too many of these errors the whole site crashes (have to clear .Net temp files and restart app pool). Basically I can go to a page that doesn't exist, hit refresh many times and take the site down. Extremely bad. However, first thing, how can I get the bots to not try to access this page?
Thanks in advance.
If it's just a single page, or a few pages that are causing this, modify robots.txt to tell the legitimate search engines not to check it.
I'd also check what HTTP response you're sending when the page is not found? You might be sending something that causes the spider to think it should keep checking? Instead of a 404 maybe you should try permanently redirecting to your home page?
Finally, WTF? I'd talk to the Ketnico folks about this bug.
I think that you have a configuration error. While a robots.txt file would hopefully correct this issue, bots can choose to ignore that file.
A better solution would be to setup your error pages correctly. What happens when you go to a page that doesn't exist? It sounds like your system is showing a yellow screen, which is an unhandled exception bubbling all the way up to the user. I would check your error page setup so that users (and robots) get redirected to a 404 error page. I'm guessing that when Yahoo and others see that 404 page, they will stop trying to index it.
Have you tried using a robots.txt file?

Error SiteMap

What is this error when I SiteMapPath and Configure whit siteMap.of course when I upload my website,I showing this error : "The page cannot be found
The page you are looking for might have been removed, had its name changed, or is temporarily unavailable.
Please try the following:
Make sure that the Web site address displayed in the address bar of your browser is spelled and formatted correctly.
If you reached this page by clicking a link, contact the Web site administrator to alert them that the link is incorrectly formatted.
Click the Back button to try another link.
HTTP Error 404 - File or directory not found.
Internet Information Services (IIS)
"
What Do I do that SiteMap work correctly ?
Here is a critical question and something to try:
Does the website work on your development machine?
If it does work then check the url for the pages in the SiteMap. If the URL for the pages in the SiteMap reference a physical directory such as "C:\mySite\MyPage.aspx" then that is the most likely cause. You want to ensure that the URLs refernce the page location through a relative path like "~/MyPage.aspx".
If it does not work, then verify that there are no typing errors in the URLS. Once you getting it working on a local development environment using relative paths then the chance of it working on a remote machine should go up considerably.

Resources