, :
web.config.
<location path="ajaxReuests">
<system.web>
<customErrors mode="Off" />
</system.web>
</location>
vunerability.
( ) ajax-complete-callback - "" . , , :
<head runat="server">
<title>Oops</title>
<link href="/css/default.css" rel="stylesheet" type="text/css" />
<meta name="statuscode" content="500" />
...
XmlHttpRequest.responsText , .
$.ajax({
url: '/ajax/mydata.ashx',
dataType: 'json',
complete: function(XMLHttpRequest, textStatus) {
var statuscodeRegex = /content="(.*?)"/;
if (statuscodeRegex.test(XMLHttpRequest.responseText) &&
statuscodeRegex.exec(XMLHttpRequest.responseText)[0] != 200)
this.error(XMLHttpRequest, textStatus, "Oh no... an error!");
},
success: function(myData) {
},
error: function(XMLHttpRequest, textStatus, errorThrown) {
}
});