This problem is a little similar to the previous issue (AJAX Error with mod_security enabled);
When I tried to enable the glossary view, I got this error:
An AJAX HTTP error occurred.
HTTP Result Code: 406
Debugging information follows.
Path: /gcheck/admin/structure/views/view/glossary/enable?token=vfVr0K5y7XYj6xEum29E8EBk9FYhR2D-TTfzegByinI
StatusText: Not Acceptable
ResponseText:
406 Not Acceptable
Not Acceptable
An appropriate representation of the requested resource /gcheck/admin/structure/views/view/glossary/enable could not be found on this server.
Apache/2 Server at example.com Port 80The mod_security gives me this error too:
[Tue May 13 22:49:09 2014] [error] [client 255.255.255.255] ModSecurity: Access denied with code 406 (phase 2). Pattern match "(?:\\\\b(?:(?:type\\\\b\\\\W*?\\\\b(?:text\\\\b\\\\W*?\\\\b(?:j(?:ava)?|ecma|vb)|application\\\\b\\\\W*?\\\\bx-(?:java|vb))script|c(?:opyparentfolder|reatetextrange)|get(?:special|parent)folder|iframe\\\\b.{0,100}?\\\\bsrc)\\\\b|on(?:(?:mo(?:use(?:o(?:ver|ut)|down|move|up)|ve)| ..." at ARGS_NAMES:ajax_page_state[js][misc/jquery.cookie.js]. [file "/etc/modsecurity2/modsec2.user.conf"] [line "117"] [id "1234123404"] [msg "Cross-site Scripting (XSS) Attack"] [data ".cookie"] [severity "CRITICAL"] [tag "WEB_ATTACK/XSS"] [hostname "example.com"] [uri "/gcheck/admin/structure/views/view/glossary/enable"] [unique_id "U3JiHF7orjEAACovWMMAAAAB"]
I do not want disable the mod_security. What should I do with this issue?
Thanks
Comments
Comment #1
dawehnerI guess that bit is mostly handled by ctools these days.
Comment #2
damienmckennaCTools v8.x-1.x is abandoned, v8.x-2.x is a from-scratch rewrite, so moving this back to 7.x-1.x.
Comment #3
damienmckennaMoving back to the Views issue queue as CTools on D8 is being rewritten from scratch. Lets work out the fix for D7 and then see where it might be relevant for D8 later.
Comment #4
damienmckenna