This forum has moved to a new location and is in read-only mode. Please visit talk.octobercms.com to access the new location.

Andrew
Andrew

Hey all,

I have tried reloading the page like the error suggests no avail, I have come across this in all the markup editors for the CMS module. I have been doing some testing and trying to figure out what causes this and there isn't any pattern.

Produces Error:

<li class="widget subscribe-widget clearfix">
    <h3 class="widget-title">Subscribe</h3>

    <form>
        <input type="text" data-value="Enter your email address" value="Enter your email address"/>
        <input type="submit" value="Submit"/>
    </form>
</li>

Produces Error:

<form>
    <input type="text">
</form>

Produces Success:

<form>
    <input type="text"/>
</form>

This only scratches the surface since I cannot edit any of my files within the backend.

Just wondering if anyone else has come across this problem and can reproduce the same results as above?

Last updated

Andrew
Andrew

Hey guys,

Found out this only happens in an Apache environment with mod_security and gets triggered by rule 350148.

kpjackson274280
kpjackson274280

How did you fix this error? I am having the same problem.

Thanks

Andrew
Andrew

I fixed this by disabling mod_security. Other ways you could do this is adding exceptions to mod security.

Goddard
Goddard

Disabling mod_security isn't a good option. Why is it having this error? It isn't cross-domain?

Goddard
Goddard

This can help us learn from previous CMS systems. - http://ocportal.com/site/s/35.htm

Goddard
Goddard

I found out that a normal rule set is the issue. - http://www.atomicorp.com/

So the IDs are likely different if this isn't your rule provider. I posted about OctoberCMS to their forum. Hopefully they see it and help us out.

I think this provider is a common one as it appears OC Portal uses it. CentOS/WHM/Cpanel

Last updated

ejwill
ejwill

Just started to get this problem myself, my host puts a timed block each time it happens, so after a few modifications I'm locked out for an hour.

Anyone found a work around that doesn't require disabling mod_security?

The error log i get is: 350147 Atomicorp.com UNSUPPORTED DELAYED Rules: Potentially Untrusted Web Content Detected 1 **.***.co.uk/backend/cms \"$MS_DATA\"

Last updated

1-8 of 8

You cannot edit posts or make replies: the forum has moved to talk.octobercms.com.