Re: [mod-security-users] mod security and error message displaying

[Ivan R. <iva...@gm...>]

On 9/12/06, Johnny GoLightly <myw...@ya...> wrote:
>
> Hi,
>
> I have actually found that the 500 error message is getting sent. internet
> explorer doesnt dispaly it though because "show Friendly HTTP error
> messages"  is enabled by default which suppresses the pages sent by the web
> server. If you disable the setting then the mesage comes through.
>
> I guess that since this setting is enabled by default most users will never
> see custom error messages from web sites - rendering those mesasges a little
> useless.
>
> Any idea why Microsoft did this?

I believe their intention is to show a "friendly" error message in
case of a CGI script crash (and thus no output). I seem to recall that
the IE error message is triggered only of the actual error message is
to short. Try adding a few hundred bytes to your error page as a HTML
comment.

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall