我有一个ASP.NET网站,我们有一个管理员区域,登录页面仅供管理员使用,所有网站都是允许的-我需要询问如何为它定义正确的安全配置,因为我收到了这个错误

Cannot use a leading .. to exit above the top directory. 
Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code. 

Exception Details: System.Web.HttpException: Cannot use a leading .. to exit above the top directory.

Source Error: 

An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.  

Stack Trace: 


[HttpException (0x80004005): Cannot use a leading .. to exit above the top directory.]
   System.Web.Util.UrlPath.ReduceVirtualPath(String path) +8862087
   System.Web.Util.UrlPath.Reduce(String path) +52
   System.Web.Util.UrlPath.Combine(String appPath, String basepath, String relative) +214
   System.Web.UI.Control.ResolveClientUrl(String relativeUrl) +180
   System.Web.UI.WebControls.Image.AddAttributesToRender(HtmlTextWriter writer) +68
   System.Web.UI.WebControls.WebControl.RenderBeginTag(HtmlTextWriter writer) +20
   System.Web.UI.WebControls.WebControl.Render(HtmlTextWriter writer) +20
   System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +25
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +134
   System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19
   System.Web.UI.HtmlControls.HtmlForm.RenderChildren(HtmlTextWriter writer) +163
   System.Web.UI.HtmlControls.HtmlContainerControl.Render(HtmlTextWriter writer) +32
   System.Web.UI.HtmlControls.HtmlForm.Render(HtmlTextWriter output) +51
   System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99
   System.Web.UI.HtmlControls.HtmlForm.RenderControl(HtmlTextWriter writer) +40
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +134
   System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19
   System.Web.UI.Control.Render(HtmlTextWriter writer) +10
   System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +25
   System.Web.UI.Control.RenderChildrenInternal(HtmlTextWriter writer, ICollection children) +134
   System.Web.UI.Control.RenderChildren(HtmlTextWriter writer) +19
   System.Web.UI.Page.Render(HtmlTextWriter writer) +29
   System.Web.UI.Control.RenderControlInternal(HtmlTextWriter writer, ControlAdapter adapter) +27
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer, ControlAdapter adapter) +99
   System.Web.UI.Control.RenderControl(HtmlTextWriter writer) +25
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1266

我的配置文件:

 <authentication mode="Forms">
  <forms name=".ASPXFORMSAUTH" protection="All" loginUrl="Admin/LoginPage.aspx" path="/" enableCrossAppRedirects="true">
  </forms>
</authentication>
<authorization>
  <deny users="*" />
</authorization>

推荐答案

这意味着您的网页引用的内容位于您的页面的上一级文件夹中,但您的页面已经位于网站的根文件夹中,因此相对路径无效.从您的异常消息判断,似乎是图像控件导致了问题.

您必须具备以下内容:

<asp:Image ImageUrl="..\foo.jpg" />

但是,由于页面本身位于网站的根文件夹中,它不能向上一级引用内容,这是领先的..\家公司正在做的事情.

Asp.net相关问答推荐

如何在 ASP.NET RadioButtonList 中的项目之间添加空格

.NET 框架 3.5 和 TLS 1.2

带有模型的 mvc 上传文件 - 第二个参数发布的文件为空

在 DataTextField 中组合两个字段.这可能吗?

我可以在 .net 核心中使用 Entity Framework 6(非核心)吗?

如何使用特定视图(不是控制器名称)返回 ActionResult

判断会话是否为空

IIS 6.0 通配符映射基准?

AddDefaultTokenProviders:它是什么以及如何使用那些默认提供者?

IIS 10 上的 ASP.NET Core 404 错误

如何在 C# 中转换 TryCast?

使用 jQuery 调用 ASP.NET PageMethod/WebMethod - 返回整个页面

使用 ASP.NET Web API 对 PUT 和 DELETE 的 CORS 支持

如何获取正在访问 ASP.NET 应用程序的当前用户?

使 Web.config 转换在本地工作

捕获的异常本身为 null !

验证请求事件

错误处理(向客户端发送 ex.Message)

将 HTML 字符串转换为图像

如何使用 int ID 列更改 ASP.net Identity 2.0 的表名?