Open Closed

Custom Error Code page Implementation for Hidden Directory Detected security concerns #3441


User avatar
0
Rajasekhar created
  • ABP Framework version: v3.2.0
  • UI type: MVC
  • DB provider: EF Core
  • Tiered (MVC): Yes
  • Exception message and stack trace:
  • Steps to reproduce the issue:
    1. Host the application in IIS & open the application URL
    1. Search for hidden directories eg : https://abpapplication.com/..%2fconsole.portal
    1. It is showing 403 error, forbidden
    1. But we want to redirect the error and show as 404.
Markdown supported.
Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)

1 Answer(s)
  • User Avatar
    0
    gterdem created
    Senior .NET Developer

    This seems pretty much related to web server (IIS in this case) instead of ABP.

    You can try IIS Request filtering. Also, there is an SO answer related to this.

    Markdown supported.
    Copy, paste, or drag & drop images and files (max 100 MB per file, 100 MB total per post)
Boost Your Development
ABP Live Training
Packages
See Trainings
Mastering ABP Framework Book
The Official Guide
Mastering
ABP Framework
Learn More
Mastering ABP Framework Book
Made with ❤️ on ABP v10.8.0-preview. Updated on September 16, 2026, 14:50
1
ABP Assistant
🔐 You need to be logged in to use the chatbot. Please log in first.