Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • Sean Oldfield 4 posts 24 karma points
    Sep 25, 2015 @ 15:53
    Sean Oldfield
    0

    Server Error - 404 on Umbraco Contour Dashboard

    When opening the contour dashboard in the umbraco backoffice I keep receiving a 404 server error in a modal popup.

    It looks as if the code in the file:

    \Umbraco\Plugins\umbracoContour\FormsDashboard.ascx

    is making a ajax call to a dead link within the umbraco docs:

    <script type="text/javascript">
    
    jQuery(function() {
    
        jQuery.ajax({
            type: 'GET',
            url: '<% if (CompatibilityHelper.IsVersion7OrNewer){ %>../<% } %>plugins/umbracocontour/feedproxy.aspx?url=http://umbraco.org/documentation/videos/umbraco-pro/contour/feed',
            dataType: 'xml',
            success: function(xml) {
    
    
                var html = "<div class='tvList'>";
    
                jQuery('item', xml).each(function() {
    
                    html += '<div class="tvitem">'
                    + '<a target="_blank" href="'
                    + jQuery(this).find('link').eq(0).text()
                    + '">'
                    + '<div class="tvimage" style="background: url(' + jQuery(this).find('thumbnail').attr('url') + ') no-repeat center center;">'
                    + '</div>'
                    + jQuery(this).find('title').eq(0).text()
                    + '</a>'
                    + '</div>';
                });
    
                html += "</div>";
    
                jQuery('#latestformvids').html(html);
            }
    
        });
    
    
    
    });
    

    When this is removed the error stops, just thought id put this here if anyone else runs into the same issue

  • Comment author was deleted

    Sep 28, 2015 @ 08:22

    Thanks for reporting! We recently upgraded the site and must have done something wrong which ended up in removal of that feed.

  • Regin Larsen 3 posts 24 karma points
    Sep 28, 2015 @ 13:59
    Regin Larsen
    0

    Maybe it's an idea to remove or replace feedproxy.aspx altogether, because malicious users could actually make use of it for making requests through your server. Unfortunately there doesn't seem to be any restrictions on which URL's that can be requested through the feedproxy.

    E.g. it's possible to request google.com by using: http://www.example.org/umbraco/plugins/umbracocontour/feedproxy.aspx?url=http://www.google.com (replace example.org with a domain where Umbraco Contour is installed).

    / Regin

Please Sign in or register to post replies

Write your reply to:

Draft