Page 1 of 1
ASL WAF update broke plesk pages
Posted: Thu Jan 09, 2014 7:14 am
by DarkF@der
Hello,
I have enabled waf on de plesk port.
After the upgrade a couple plesk pages get a 404 on all machines
like the client backup page, the client ftp account page and also the client cert page.
These pages get a 404 page not found.
If i disable to use WAF on plesk ports it's all working again.
Greetz
Re: ASL WAF update broke plesk pages
Posted: Thu Jan 09, 2014 9:21 am
by scott
Is it because the URL's have @ in them?
Re: ASL WAF update broke plesk pages
Posted: Thu Jan 09, 2014 9:27 am
by DarkF@der
yep they have. How to fix it i needed to disable waf to fix it.
Re: ASL WAF update broke plesk pages
Posted: Fri Jan 10, 2014 1:49 pm
by DarkF@der
Any solution to this i really like to enable WAF on plesk panel
Re: ASL WAF update broke plesk pages
Posted: Fri Jan 10, 2014 4:01 pm
by scott
That @ is a reserved character in http, its the delimiter between a username/password and hostname in an HTTP Auth connection. Plesk is using that character in a way it shouldnt, and its out of compliance with the protocol. To "fix" that would mean breaking the Http auth.
Re: ASL WAF update broke plesk pages
Posted: Fri Apr 25, 2014 8:31 am
by mikeshinn
It looks like newer versions of Plesk are using this character correctly now.
Re: ASL WAF update broke plesk pages
Posted: Sun Apr 27, 2014 6:53 am
by faris
as in 12+ ?