'+' symbol problem in URL in IIS 7.x

asp.net url iis-7 encoding windows-server-2008
Kashif picture Kashif · Jan 5, 2011 · Viewed 18.3k times · Source

We are sending an HTML encoded string in the Query string. It was working fine on IIS 6 (windows 2003). We have recently moved the website to Windows 2008 (IIS 7.x). Since the move any Query String that contains "+" sign i.e., "%2b" gives error on the server "404 - File or directory not found."

Any help?

Best regards.

Answer

DOTNET Team picture DOTNET Team · Apr 12, 2014

The reason why you are facing this error is that IIS7 has introduced new URL filtering rules for security reasons. So '+' sign is blocked by default as part of security reason in URL.

To resolve this issue you have to set allowDoubleEscaping="true" in web.config files. Here is the tag to do that.

<system.webServer>
<security>
  <requestFiltering allowDoubleEscaping="true">
  </requestFiltering>
</security>

Related questions

Path.Combine for URLs?

Path.Combine is handy, but is there a similar function in the .NET framework for URLs? I'm looking for syntax like this: Url.Combine("http://MyUrl.com/", "/Images/Image.jpg") which would return: "http://MyUrl.com/Images/Image.jpg"

Read More
A potentially dangerous Request.Path value was detected from the client (*)

I am receiving the rather self explanatory error: A potentially dangerous Request.Path value was detected from the client (*). The issue is due to * in the request URL: https://stackoverflow.com/Search/test*/0/1/10/1 This url is used to populate a …

Read More
How do I decode a URL parameter using C#?

How can I decode an encoded URL parameter using C#? For example, take this URL: my.aspx?val=%2Fxyz2F

Read More