Debugging VS .NET with URLScan Installed


By default, URLScan does not allow the DEBUG verb. Therefore, when you use VS.NET to debug a Web application on a server where URLScan is installed, you may see the following error:

 Microsoft Development Environment: Error while trying to run project: Unable to start debugging on the web server.  Could not start ASP.NET or ATL Server debugging.     Verify that ASP.NET or ATL Server is correctly installed on the server. Would you  like to disable future attempts to debug ASP.NET pages for this project? Yes  No  Help 

Your URLScan log file will also contain an entry similar to the following:

 [01-18-2003 - 22:25:26] Client at 127.0.0.1: Sent verb 'DEBUG', which is not  specifically allowed. Request will be rejected. 

To support debugging, add DEBUG to the AllowVerbs section in URLScan.ini as shown below:

 [AllowVerbs] GET HEAD POST DEBUG 
Note  

You need to restart IIS for changes to take effect.




Improving Web Application Security. Threats and Countermeasures
Improving Web Application Security: Threats and Countermeasures
ISBN: 0735618429
EAN: 2147483647
Year: 2003
Pages: 613

flylib.com © 2008-2017.
If you may any questions please contact us: flylib@qtcs.net