none
Report Viewer Control disclose header information while rendering report on web page. RRS feed

  • Question

  • I am using .Net Report Viewer Web Form control in ASP.Net MVC 3 application. All the reports rendering perfectly in local and IIS7.5 web server as we made proper configuration to run reports.  But when our security tool scan html response of report pages, it's found below html on pages. User don't see this error, they see report results. In HTML, we disclose the report viewer version information which is security risk. How should we avoid rendering version information in error message? How should we avoid rendering of html of error section when report working properly on web server?

    Report Viewer Configuration Error

    The Report Viewer Web Control HTTP Handler has not been registered in the application's web.config file. Add <add verb="*" path="Reserved.ReportViewerWebControl.axd" type = "Microsoft.Reporting.WebForms.HttpHandler, Microsoft.ReportViewer.WebForms, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> to the system.web/httpHandlers section of the web.config file, or add <add name="ReportViewerWebControlHandler" preCondition="integratedMode" verb="*" path="Reserved.ReportViewerWebControl.axd" type="Microsoft.Reporting.WebForms.HttpHandler, Microsoft.ReportViewer.WebForms, Version=10.0.0.0, Culture=neutral, PublicKeyToken=b03f5f7f11d50a3a" /> to the system.webServer/handlers section for Internet Information Services 7 or later.

    • Moved by Mike Feng Tuesday, April 2, 2013 7:30 PM
    Monday, April 1, 2013 9:42 PM

All replies