1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
|
namespace System.Web.UI {
using System;
using System.Runtime.Serialization;
using System.Web;
using System.Web.Util;
using System.Globalization;
using System.Security.Permissions;
[Serializable]
public sealed class ViewStateException : Exception, ISerializable {
// not in System.Web.txt because it should not be localized
private const string _format = "\r\n\tClient IP: {0}\r\n\tPort: {1}\r\n\tReferer: {2}\r\n\tPath: {3}\r\n\tUser-Agent: {4}\r\n\tViewState: {5}";
private bool _isConnected = true;
private string _remoteAddr;
private string _remotePort;
private string _userAgent;
private string _persistedState;
private string _referer;
private string _path;
private string _message;
internal bool _macValidationError;
public override string Message { get { return _message; } }
public string RemoteAddress { get { return _remoteAddr; } }
public string RemotePort { get { return _remotePort; } }
public string UserAgent { get { return _userAgent; } }
public string PersistedState { get { return _persistedState; } }
public string Referer { get { return _referer; } }
public string Path { get { return _path; } }
public bool IsConnected { get { return _isConnected; } }
private ViewStateException(SerializationInfo info, StreamingContext context)
:base(info, context) {
}
// Create by calling appropriate Throw*Error method, which wraps the error
// in an HttpException that displays a meaningful message at the top of the page.
public ViewStateException() {}
private ViewStateException(string message) {}
private ViewStateException(string message, Exception e) {}
private ViewStateException(Exception innerException, string persistedState):
base(null, innerException) {
Initialize(persistedState);
}
private void Initialize(string persistedState) {
_persistedState = persistedState;
HttpContext context = HttpContext.Current;
HttpRequest request = context != null ? context.Request : null;
HttpResponse response = context != null ? context.Response : null;
// Return the generic viewstate error if the request does not have permission to ServerVariables
if (request == null || response == null ||
!HttpRuntime.HasAspNetHostingPermission(AspNetHostingPermissionLevel.Low)) {
_message = ShortMessage;
return;
}
_isConnected = response.IsClientConnected;
_remoteAddr = request.ServerVariables["REMOTE_ADDR"];
_remotePort = request.ServerVariables["REMOTE_PORT"];
_userAgent = request.ServerVariables["HTTP_USER_AGENT"];
_referer = request.ServerVariables["HTTP_REFERER"];
_path = request.ServerVariables["PATH_INFO"];
string debugInfo = String.Format(CultureInfo.InvariantCulture,
_format,
_remoteAddr,
_remotePort,
_referer,
_path,
_userAgent,
_persistedState);
_message = SR.GetString(SR.ViewState_InvalidViewStatePlus, debugInfo);
}
[SecurityPermissionAttribute(SecurityAction.Demand, SerializationFormatter=true)]
public override void GetObjectData(SerializationInfo info, StreamingContext context) {
base.GetObjectData(info, context);
}
internal string ShortMessage {
get { return SR.ViewState_InvalidViewState; }
}
// if the client disconnected, we want to display that at the top of the error page
private static string GetCorrectErrorPageMessage(ViewStateException vse, string message) {
if (!vse.IsConnected)
return SR.GetString(SR.ViewState_ClientDisconnected);
else
return SR.GetString(message);
}
private static void ThrowError(Exception inner, string persistedState, string errorPageMessage,
bool macValidationError) {
ViewStateException middle;
HttpException outer;
middle = new ViewStateException(inner, persistedState);
middle._macValidationError = macValidationError;
// Setup the formatter for this exception, to make sure this message shows up
// in an error page as opposed to the inner-most exception's message.
outer = new HttpException(GetCorrectErrorPageMessage(middle, errorPageMessage), middle);
outer.SetFormatter(new UseLastUnhandledErrorFormatter(outer));
throw outer;
}
internal static void ThrowMacValidationError(Exception inner, string persistedState) {
ThrowError(inner, persistedState, SR.ViewState_AuthenticationFailed, true);
}
internal static void ThrowViewStateError(Exception inner, string persistedState) {
ThrowError(inner, persistedState, SR.Invalid_ControlState, false);
}
// Returns true if this exception was caused by a view state MAC validation failure; false otherwise
internal static bool IsMacValidationException(Exception e) {
for (; e != null; e = e.InnerException) {
ViewStateException vse = e as ViewStateException;
if (vse != null && vse._macValidationError) {
return true;
}
}
// not a ViewState MAC validation exception
return false;
}
}
}
|
