Mod_Security rule 1234123404 jscript issue

Support has been upgraded!



The Support Forum is closed. Not to worry!  Providing the top quality support you expect and we're known for will continue! We're not ending support, just changing where you submit requests. This will provide you with the best experience possible.

Premium Support

Have you purchased an addon for Connections such as one of our premium templates or extensions with a valid license and you need help?

Please open a Support Ticket in your user account.

Click here to open a support ticket.

Free Support

Are you using the free Connections plugin? Don't worry, you are still very important to us! We are still providing you with the same high quality support that we're known for.

Please open a new support topic in the WordPress support forums for Connections.

Click here to open a support topic.

This topic is: resolved

Tagged: , , ,

Viewing 4 posts - 1 through 4 (of 4 total)
  • Author
    Posts
  • 10/31/2013 at 1:07 pm #272773
    Randy McCall
    Participant

    Just thought I’d mention this, as it cost me a couple of hours this morning.

    If you / your server company is running Mod_Security, you may run into issues with M_S rule 1234123404, which prevents the use of certain jscript-based cookies. It will cause an issue where no cMap jscript box can open.

    Identified the issue via Chrome > Console and Goolging the resultant errors.

    I simply whitelisted the rule in Mod_Security, which removed the issue.

    10/31/2013 at 1:38 pm #272774
    Steven Zahm
    Keymaster

    @ Randy

    I’ve never run across this before. Are you rolling your own server using the default mod_sec rule set?

    The script for cMap is very basic jQuery, show/hide and append to div so it would be really odd that something so simple would trip up mod_sec.

    Thanks for for the info it definitely will be very valuable to have if someone else has the same trouble.

    If I may, what was the error in the Console?

    10/31/2013 at 2:12 pm #272775
    Randy McCall
    Participant

    @Steven,

    Yes, on my own Apache server with Mod_Sec, Mod_Sec_Control panel.

    The key error which lead me to the solution was: Get http://domain.com/wordpress directories/theme name/js/jquery.cookie.js?ver=1.0 404 (Not Found)

    A second line, which I can’t remember, indicated there were no cookies of that type found.

    A quick search of “/js/jquery.cookie.js?ver=1.0 404 (Not Found)” lead me to a number of CMS forums where this problem was raised. It was the forum for my server control system which listed this as a Mod_Sec error, likely to be seen as violations of rules 1234123404, 1234123440, or 1234123406. Checking my Mod_Sec output, it showed the Rule 1234123404 error occurring when I was trying to access the page.

    Once I white-listed the rule in Mod_Sec, the issue disappeared.

    Glad to help

    • This reply was modified 12 years, 9 months ago by Randy McCall.
    10/31/2013 at 2:27 pm #272777
    Randy McCall
    Participant

    To be more precise, the quote from the forum states:

    “yes ruleset (1234123404 and 1234123440) block wordpress and joomla, you can just use ConfigServer ModSecurity Control to disabel these rules per domain or in global server”

    • This reply was modified 12 years, 9 months ago by Randy McCall.
  • Author
    Posts
Viewing 4 posts - 1 through 4 (of 4 total)

You cannot reply to this support topic. Please open your own support topic.