Sharing to maybe help someone else coming across this issue.
We performed a recent update to CF2021 using JVM 11.0.21. We had one customer using our blog application get a 500 error when trying to display their blogs. I commented out code endlessly to narrow down the issue and could not figure it out. We were getting the same exception as Pete in our error logs. I finally decided to inspect the text content of the blog entries themselves, and noticed that when they created them, they all started with the following...
<!--[if gte mso 15]>
<xml>
<o:OfficeDocumentSettings>
<o:AllowPNG/>
<o:PixelsPerInch>96</o:PixelsPerInch>
</o:OfficeDocumentSettings>
</xml>
<![endif]-->
<InvalidTag charset="UTF-8"><InvalidTag http-equiv="X-UA-Compatible" content="IE=edge"><InvalidTag name="viewport" content="width=device-width, initial-scale=1">
The invalid tag was getting added probably from the XSS config on the older CF2018 server. As soon as I stripped this from each of the blog entries everything worked as expected. Note, I had to remove the invalid tag entries, not the IE comment above.
<invalidtag content="IE=edge" http-equiv="X-UA-Compatible"></invalidtag>
I ran some additional tests and the small snippet above is all that it takes to throw a 500 server error.
4
Replies
AdChoices
