Vulnerability in EPiServer.Forms

Try our conversational search powered by Generative AI!

Shamrez Iqbal
May 27, 2009
  6856
(0 votes)

Making Asp.net Ajax services and IIS6/CMS5/(2003) work.

In the process of migrating a site I encountered a strange problem with asp.net ajax services.

As you all probably are aware - there are two common approaches for running ajax in asp.net.

  • UpdatePanel
  • Webservices callable from javascript

When the latter approach is used, the methods and class have to be decorated with the ScriptService and ScriptMethod attributes.

This in turn makes it possible to access the javascript-version of the services by accessing example.asmx/js or example.asmx/jsdebug. In the CMS5 site I got 404s when trying to access those Urls for a service.

After some testing and trying I found a solution.

CMS5 sites are – at least in IIS6 – configured with a wildcard application mapping handler. Having this handler one should assume that everything is caught and handled by this. But not so for the /js and /jsdebug urls.

The solution was to add an explicit handler for asmx pointing to the isapi-dll which is used in the wildcard part.

I would like to add a screenshot for this but it didn’t work publishing images to the blog so I’ll have to explain manually and perhaps conform to WCAG :-)

 

screenie

this can be done from the “Home Directory”-tab in site properties. Press the Configure button and add a new mapping there with extension .asmx.

Most likely the cause of this is a bug in the wildcard application mapping system.

May 27, 2009

Comments

Please login to comment.
Latest blogs
Google Read Aloud Reload Problems

Inclusive web experiences greatly benefit from accessibility features such as Google Read Aloud. This tool, which converts text into speech, enable...

Luc Gosso (MVP) | Dec 4, 2023 | Syndicated blog

Google Read Aloud Reload Problems

Inclusive web experiences greatly benefit from accessibility features such as Google Read Aloud. This tool, which converts text into speech, enable...

Luc Gosso (MVP) | Dec 4, 2023 | Syndicated blog

Import Blobs and Databases to Integration Environments

In this blog, we are going to explore some new extensions to the Deployment API in DXP Cloud Services, specifically the ability to import databases...

Elias Lundmark | Dec 4, 2023

Join the Work Smarter Webinar: Working with the Power of Configured Commerce (B2B) Customer Segmentation December 7th

Join this webinar and learn about customer segmentation – how to best utilize it, how to use personalization to differentiate segmentation and how...

Karen McDougall | Dec 1, 2023

Getting Started with Optimizely SaaS Core and Next.js Integration: Creating Content Pages

The blog post discusses the creation of additional page types with Next.js and Optimizely SaaS Core. It provides a step-by-step guide on how to...

Francisco Quintanilla | Dec 1, 2023 | Syndicated blog

Stop Managing Humans in Your CMS

Too many times, a content management system becomes a people management system. Meaning, an organization uses the CMS to manage all the information...

Deane Barker | Nov 30, 2023