drupal 7.7 and 7.8 generate Cross-site Scripting (XSS) Attack(says hosting server log.). my IP is Blocked by server

Log file attached

CommentFileSizeAuthor
abuse.txt2.98 KBlokinder.chauhan

Comments

bfroehle’s picture

bfroehle commented
Component: javascript » base system
Assigned: lokinder.chauhan » Unassigned
Category: bug » support

Since this is an issue with your server security settings, I'm changing this to a support request.

In the mean time, you could try clearing your cookies.

skottler’s picture

skottler commented
Status: Active » Closed (works as designed)

This is not a bug with application layer code. Marking closed.

lokinder.chauhan’s picture

lokinder.chauhan commented
Component: base system » javascript
Status: Closed (works as designed) » Active

this IP blocking situation comes with Apache server with mod_security enabled. indicates rule # 950004 is triggering the sucurity issue with server.

file causing this sitution is found to is
url /misc/jquery.cookie.js
if it is not issue. why it is not working in mode security firewall enabled in Apache.

bfroehle’s picture

bfroehle commented
Priority: Critical » Normal
Status: Active » Closed (duplicate)

Searching for "mod_security 950004 jquery.cookie" on Google leads to some other relevant results, including:

  1. Mod Security Blocking jQuery.cookie.js in Drupal Installation
  2. #522646: jquery.cookie.js incompatible with Apache mod_security by default

You might find the last link useful as it includes some recommendations (upgrade your mod_security core rules, or use a .htaccess workaround).

bmeadan’s picture

bmeadan commented
Status: Closed (duplicate) » Active

This has happened to me with a shared server several times. The hosting company (Hostican) says there's nothing they can do -- too many connections at once. But all I'm doing is working on Views. Is there anything I can do?

This never happens when I'm working on Drupal 6 sites, only D7.

bfroehle’s picture

bfroehle commented
Status: Active » Closed (duplicate)

The hosting company (Hostican) says there's nothing they can do -- too many connections at once.

bmeadan: This sounds unrelated... the original issue is about a mod_security (which looks at the filename / url request), not the number of connections.

Please open a new issue (rather than reopening this old issue).

palani_26’s picture

palani_26 commented
Priority: Normal » Critical
Status: Closed (duplicate) » Active

My IP got blocked.. whichever ip i go and work with drupal 7 with modules.. my ipd is getting blocked.. and server guys clearly told they have nothing to do.. please some one help m eon this urgently..

Thanks
Palani

marcvangend’s picture

marcvangend
he/him
Primary language Dutch
Location Amsterdam
commented
Priority: Critical » Normal
Status: Active » Closed (duplicate)

palani_26, please don't hijack other issues.