Description: ASP.NET has detected data in the request that is potentially dangerous because it might include HTML markup or script. The data might represent an attempt to compromise the security of your application, such as a cross-site scripting attack. If this type of input is appropriate in your application, you can include code in a web page to explicitly allow it. For more information, see http://go.microsoft.com/fwlink/?LinkID=212874.
Hello,
I was on a remote web session with an engineer and we discovered that the Scheduler UI isn't saving the changed password to the database.
The environment that I use is below.
- Report Server is installed in an Azure Virtual Machine
- IIS is bound to ports 443 and 83
- The SMTP Service is on RackSpace
- The storage is located in SQL Server
The steps to reproduce are as follows.
- Change the Password
- Save the Changes
- Send Test
- Receive Error output
During the Remote Web Assistance Session, we tried a Gmail SMTP server and received the same results.
We also enabled tracing and noticed an error in the event logs which I will attach here.
Please let me know if you need any additional information.
In a Scheduled Task created with the Report Server API, the day of the week in the recurrence rule is not shown in the Edit Task window of the Report Server Manager. A detailed description of the issue is available in this forum post.
Hello,
It would be nice to edit raw html or paste html into the mail template editor.
This leads to users not being able to open the report from the table and sends them to a bad URL since the category is undefined.
I create a Report Book in the Standalone designer that is connected to my Report Server. When I add the first two reports, the Report Book is rendered as expected. When I add the third one, it fails with the exception:
Report processing was cancelled. Index was out of range. Must be non-negative and less than the size of the collection. Parameter name: index
Here is a link to a short video demonstrating the problem. All the individual reports run correctly.
Hi,
I have a report that is scheduled to happen first day of every month. The thing is that when I look at the next occurrence of the report, it is happening on the second day of the month. I am attaching the report settings herewith. Please let me know if you have a solution/ explanation to get this corrected. Thanks a lot in advance.
Getting this error in the browser when trying to preview a report:
Error registering the viewer with the service. An error has occurred. Incorrect value (null) deserialized. Make sure you are using CacheStorage inside single-instance application deployment only.
A possible reason is the cache for the Report Server used for previewing reports has become corrupted. A workaround is explained in the Telerik.Reporting.Cache.CacheStorage.AddInSet NullReferenceException KB article.
It will be very convenient for the user to be able to clear the cache directly from the Report Server Manager UI.
There are vulnerabilities in the Report Server related to Cross-Site Scripting.
Poor Error Handling: Unhandled exception
Error pages containing stack traces were found on these pages:
https://reports.abc.com/Account/ForgotPassword POST parameters: __RequestVerificationToken, Email
https://reports.abc.com/Account/Login POST parameters: __RequestVerificationToken, Username, Password, RememberMe, ReturnUrl https://reports.abc.com/api/reportserver/documents/C$39cae14f81d$9809a8279f1$72d6f30af5b7ed1809a23e
Stack traces are call chains of line numbered source code that usually result from unhandled exceptions. Unhandled exceptions are circumstances in which the application has received user input that it did not expect and doesn't know how to deal with. In many cases, an attacker can leverage the conditions that cause these errors in order to gain unauthorized access to the system. Recommendations include designing and adding consistent error-handling mechanisms that are capable of handling any user input to your web application, providing meaningful detail to end-users, and preventing error messages that might provide information useful to an attacker from being displayed.
It seems that when you try to open two tabs in the same browser looking at different websites, the browser gets confused about the URL that is sending the request. Issue is related to CORS protocol and HTTP caches.
It sounds like something needs to be changed on the report server so that even if it gets cached it would still allow access when I switch sub domains. Or something on the viewer side to clear the cache.