1

All my efforts at "view rendered" are met with "Error: The link you are being redirected to contained some potentially malicious or dangerous code. We recommend you hit the back button and email [my email] to report the link that generated this message.

This is my exploratory effort upon installation.

5
  • What version of expressionengine, and do you have any 3rd party add-ons installed? May 19, 2017 at 18:07
  • What is throwing the error? Virus scanner? Browser? something else? ExpressionEngine?
    – Jim Wyse
    May 22, 2017 at 14:19
  • Actually, that is in the core_lang.php file, so it must be EE. It is for "redirect_xss_fail".
    – Jim Wyse
    May 22, 2017 at 14:21
  • What does the url you are trying to open look like?
    – Jim Wyse
    May 22, 2017 at 14:26
  • It's the most recent version of EE 3.5.6, and I have no idea what's throwing the error. May 23, 2017 at 13:41

1 Answer 1

1

I had this happen a few weeks ago. I don't remember all the details (of course), but it was an Apache ModSecurity rule being triggered by navigating to the admin. Some of the url words flagged a security keyword.

Getting around this involved finding the rule being triggered and removing it.

Look at ModSecurity Tools in WHM:

  1. Find the rule id being triggered for the url you were trying to access.

  2. Override the rule: On Rules List > Edit Rules add in a directive to override the rule when matched, like (with the correct id instead of 123456).

:

<locationmatch "^/my-custom-ee-admin-name/index.php.*">
  SecRuleRemoveById 123456
</locationmatch>

https://documentation.cpanel.net/display/ALD/ModSecurity+Tools

examples of location matching for disabling modsec rules

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.