Login  Register

Re: Orbeon and apache front-end

Posted by Erik Bruchez on Dec 14, 2010; 2:29am
URL: https://discuss.orbeon.com/Orbeon-and-apache-front-end-tp3085274p3086391.html

When does this occur? Upon the client sending an Ajax request?

Looking with Firebug, I see we send: application/xml; charset=UTF-8

Not sure why the charset is there, but application/xml tends to be the
recommended Content-Type for XML.

It seems your regexp is only allowing text/xml, not application/xml,
if I am not mistaken.

-Erik

On Mon, Dec 13, 2010 at 2:55 AM, elphin.stenner
<[hidden email]> wrote:

> Hi,
>
> I am currently using Orbeon Forms bundled with a java web application.
>
> Orbeon works fine when accessing the tomcat, but when I configure an access
> via an apache front-end, I get the following error :
>
> [10/Dec/2010:09:55:26 +0100]
> [candidatures.univ-ubs.fr/sid#835a0f8][rid#8836b78][/candidatures/xforms-server][1]
> Access denied with code 501 (phase 2). Match of "rx
> (?:^(?:application\\/x-www-form-urlencoded(?:;(?:\\s?charset\\s?=\\s?[\\w\\d\\-]{1,18})?)??$|multipart/form-data;)|text/xml)"
> against "REQUEST_HEADERS:Content-Type" required. [file
> "/var/lib/modsecurity2/modsecurity_crs_30_http_policy.conf"] [line "69"] [id
> "960010"] [msg "Request content type is not allowed by policy"] [severity
> "WARNING"] [tag "POLICY/ENCODING_NOT_ALLOWED"]
>
>
> As far as I understand, the front-end has a security rule that requests a
> content-type element and denies access if there isn't one.
>
> The front-end security rules can't be loosened (University security polocy),
> so I guess I'll have to add the content-type to orbeon.
> The thing is : I'm completely new to Orbeon, and haven't got a clue as to
> how that is done.
>
> Can anyone help me ?
>
> Thanks,
>
> P.S. : please add [hidden email] to any replies
>
> --
> Elphin STENNER
> courriel: [hidden email]
> UNIVERSITE DE BRETAGNE SUD
>
>
>
> --
> You receive this message as a subscriber of the [hidden email] mailing
> list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
>
>


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws