Forum Discussion
Russell_Moore_8
Nimbostratus
NimbostratusActiveSync Windows Phone query decode
I used the following rule to decode and locate the Windows Phone device ID for access control to an ActiveSync/OWA service. The AS protocol allows the query to be plain text or base64 encoded hex. ...
hooleylist
Cirrostratus
CirrostratusIf you do have the ability to wait for a hotfix that seems like the safest and simplest approach. Else, you could try adding more validation to avoid base64 decoding a non-base64 encoded string. It would be crufty, but maybe you could look for more than one = to determine that a query string isn't base64 encoded?
if { [HTTP::query] ne "" and ![expr [string length [HTTP::query]]%4] and [llength [split [HTTP::query] =]] < 2 } {
Aaron