Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

Cross site scriptin...
 
Notifications
Clear all

Cross site scripting issue during installation

4 Posts
2 Users
0 Reactions
1,059 Views
(@berthelemy)
Posts: 8
Active Member
Topic starter
 
[#9528]

Bonjour / Hi,

I'm installing on a shared hosting site (PlanetHoster). The firewall there prevented me from saving the configuration file. I could only proceed by switching off the rule that was being invoked (see below)

Am I safe to continue with this firewall rule switched off?

Merci,

Mark

Firewall report

ID : 341256Severity: CRITICALLabel : -info : Atomicorp.com WAF Rules: Possible Cross Site Scripting attack (detectXSS)message : Access denied with code 403 (phase 2). detected XSS using libinjection.Request InfoDate : 18/07/2024, 20:50 GMT+2HTTP method: POSTClient IP: 89.91.136.172Port: 2080Protocol: HTTP/1.1Uri: /tool/configCheck.php?destinationWidth=1038&destinationHeight=82.5&isIE=&xhrPostDestination=configResultDiv&xhrPostIsResultMessage=false&xhrPostValidationType=&xhrPostTimestamp=1721328614008&csrfToken=Response status : 403


 
Posted : 18 Jul 2024 23H02
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

This question is out of ProjeQtOr scope.
Please ask your web hoster.


 
Posted : 19 Jul 2024 20H53
(@berthelemy)
Posts: 8
Active Member
Topic starter
 

Thanks. I will.

I was more concerned about why Projeqtor was triggering the XSS warning?


 
Posted : 22 Jul 2024 18H56
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

Possibly the install process for your hosted server is looking like a XSS attack.
If your hoster uses control interface such as CPanle, you may use Softaculous image of ProjeQtOr to install it fluently.


 
Posted : 23 Jul 2024 12H37
Share:

Scroll to Top