Comments by Navin Ranjan (Top 2 by date)

Navin Ranjan 18-Oct-17 3:47am View

When i enter "http://10.26.14.99/projectA/../../../../test" in the url it is redirecting to "http://10.26.14.99/test" which means it is looking for file or folder with name test in 10.26.14.99 which doesn't exist, so getting the 404 error. I dont want the 404 error, i want to show the custom error page or redirect user to the login page. Is there a way to do that?

Navin Ranjan 18-Oct-17 3:08am View

This is an application security check where user can enter anything in the URL. This is a type of security threat called directory traversal attack.
I am not expecting but i can't stop user to enter ../../ in the url.
So, what i an trying to achieve here is that if user enters the ../ in the url then it should either redirect to the custom error page or redirect to the login page.