Certain characters in password for Reporting User block uploading reports

book

Article ID: 100049674

calendar_today

Updated On:

Description

Error Message

In the Windows Application Event Log, which includes the password in the event itself:

Event ID: 1309
Source: ASP.NET 4.0.30319.0
Event code: 3003
Event message: A validation error has occurred.
Process information:
    Process name: w3wp.exe
    Account name: IIS APPPOOL\EVAcceleratorAppPool
Exception information:
    Exception type: HttpRequestValidationException
    Exception message: A potentially dangerous Request.QueryString value was detected from the client (Message="...word_edt="[password]").

Cause

According to the below Microsoft article, there are specific characters that are considered to be invalid characters to be used in a password when working in .NET applications:
https://docs.microsoft.com/en-us/dotnet/api/system.web.configuration.httpruntimesection.requestpathinvalidcharacters?view=netframework-4.8

In addition to the identified passwords, it has been found that the equals character (=) also exhibits the same symptoms.

Resolution

Change the password so that none of the special characters are in the password.

Issue/Introduction

When the password for the reporting user contains one of the below comma separated characters, reports cannot be updated from the evbaadmin page.
<,>,*,%,&,:,\,=