Encoding periods (.) as .

[AnthonyVO]

My host Namecheap is now rejecting strings like "web.config" in post requests. I suspect they are trying to avoid hacking attempts that go after specific system files. This makes it annoying to write documentation using GetSimple.

One suggestion I have is to encode the period as .

Thanks again for a great and simple CMS.

[AnthonyVO]

Noticed that my last post was auto corrected. The subject line is still correct.
I would like to suggest that perdiods (.) be encoded as "& period;" <= ignore the space

[tablatronix]

Strings where, what payloads? Post?

[tablatronix]

This seems awefully lame, are they using a mod sec rule? Is this in any post or content with html and code

[AnthonyVO]

It is a ModSecurity rule. I agree it is lame. I got their hosting to disable the rule and gave them some politely worded feedback.

The problem is that when ModSecurity kicks in it gives you no clue what the problem is with the result that it makes the Web Application look bad. All I get is a "Oops! Page not found!" which is totally not helpful.

They have disabled the rule so I can't do further testing.

Namecheap is pretty large and other Hosts might try the same thing so I leave it as a suggestion so that you could get ahead of this.

Thanks for being there and being responsive.

[tablatronix]

Did you happen to get the rule id from your host error log

[AnthonyVO]

The Rule Id is 210580.

[tablatronix]

#1252