How to prevent "aspxerrorpath" being passed as a query string to ASP.NET custom error pages

Question

In my ASP.NET web application, I have defined custom error pages in my web.config file as follows:

<customErrors mode="On" defaultRedirect="~/default.html">      <error statusCode="404" redirect="~/PageNotFound.html" /> </customErrors> 

In the case of a 404 error, my site redirects to the default.html page, but it passes "aspxerrorpath" as a query string parameter to the custom error page as follows:

http://www.example.com/default.html?aspxerrorpath=/somepathcausederror/badpage.aspx 

I don't want that behavior. I want the redirect URL to simply read:

http://www.example.com/default.html 

Is there a way to achieve this?

Answer 1

If you supply your own query string variable when specifying the path, then .NET will NOT tack on the "aspxerrorpath". Who knew?

For example:

<customErrors mode="On" defaultRedirect="errorpage.aspx?error=1" > 

This will do the trick. I had to add this to a bunch of apps since URLScan for IIS by default rejects anything with "aspxerrorpath" in it anyway.