﻿<error errorId="60785e96-d568-4254-84d6-c86b74e16ae2" application="/LM/W3SVC/5/ROOT" host="IOWAVMSPDWEB01" type="System.Web.HttpException" message="A potentially dangerous Request.Path value was detected from the client (&amp;)." source="System.Web" detail="System.Web.HttpException (0x80004005): A potentially dangerous Request.Path value was detected from the client (&amp;).&#xD;&#xA;   at System.Web.HttpRequest.ValidateInputIfRequiredByConfig()&#xD;&#xA;   at System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext context)" time="2026-10-12T10:35:33.3905326Z" statusCode="400">
  <serverVariables>
    <item name="ALL_HTTP">
      <value string="HTTP_CONNECTION:close&#xD;&#xA;HTTP_ACCEPT:text/html,application/xhtml+xml,application/xml;q=0.9,application/octet-stream;q=0.9,*/*;q=0.8&#xD;&#xA;HTTP_ACCEPT_ENCODING:gzip, br&#xD;&#xA;HTTP_ACCEPT_LANGUAGE:en-US,en;q=0.5&#xD;&#xA;HTTP_HOST:idocitws.iowa.gov&#xD;&#xA;HTTP_USER_AGENT:Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 (bug-bounty research; contact https://hackerone.com/todayisnew)&#xD;&#xA;HTTP_X_FORWARDED_FOR:178.128.13.43, 192.168.3.253&#xD;&#xA;HTTP_X_BUG_BOUNTY:https://hackerone.com/todayisnew&#xD;&#xA;HTTP_CF_RAY:a495755dda498e1f-SJC&#xD;&#xA;HTTP_CDN_LOOP:cloudflare; loops=1&#xD;&#xA;HTTP_CF_CONNECTING_IP:178.128.13.43&#xD;&#xA;HTTP_TRUE_CLIENT_IP:178.128.13.43&#xD;&#xA;HTTP_CF_IPCOUNTRY:US&#xD;&#xA;HTTP_CF_VISITOR:{&quot;scheme&quot;:&quot;https&quot;}&#xD;&#xA;HTTP_X_FORWARDED_PROTO:https&#xD;&#xA;HTTP_X_FORWARDED_HOST:idocitws.iowa.gov&#xD;&#xA;HTTP_X_FORWARDED_SERVER:idocitws.iowa.gov&#xD;&#xA;HTTP_X_DYNATRACE_APPLICATION:v=2;appId=ea7c4b59f27d43eb;cookieDomain=iowa.gov;rid=47306;rpid=1284950982;en=y7ily9xm&#xD;&#xA;HTTP_X_DYNATRACE_REQUESTSTATE:agentId=0x750f07911fce6480&amp;pathDepth=1&#xD;&#xA;HTTP_X_DYNATRACE:FW4;-1657161762;19;533619840;90;2;921235433;1001;a6f7;2h01;3h1fce6480;4h5a;5h01;6h43e85dbef7528e4d4c50a64f696dde88;7h9f09235b9553e5ef;8h0101&#xD;&#xA;HTTP_TRACEPARENT:00-43e85dbef7528e4d4c50a64f696dde88-9f09235b9553e5ef-01&#xD;&#xA;HTTP_TRACESTATE:36e8efe9-9d39b7de@dt=fw4;13;1fce6480;5a;2;0;0;3e9;61f0;2h01;3h1fce6480;4h5a;5h01;7h9f09235b9553e5ef;8h0101&#xD;&#xA;" />
    </item>
    <item name="ALL_RAW">
      <value string="Connection: close&#xD;&#xA;Accept: text/html,application/xhtml+xml,application/xml;q=0.9,application/octet-stream;q=0.9,*/*;q=0.8&#xD;&#xA;Accept-Encoding: gzip, br&#xD;&#xA;Accept-Language: en-US,en;q=0.5&#xD;&#xA;Host: idocitws.iowa.gov&#xD;&#xA;User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 (bug-bounty research; contact https://hackerone.com/todayisnew)&#xD;&#xA;x-forwarded-for: 178.128.13.43, 192.168.3.253&#xD;&#xA;X-Bug-Bounty: https://hackerone.com/todayisnew&#xD;&#xA;cf-ray: a495755dda498e1f-SJC&#xD;&#xA;cdn-loop: cloudflare; loops=1&#xD;&#xA;CF-Connecting-IP: 178.128.13.43&#xD;&#xA;true-client-ip: 178.128.13.43&#xD;&#xA;CF-IPCountry: US&#xD;&#xA;CF-Visitor: {&quot;scheme&quot;:&quot;https&quot;}&#xD;&#xA;X-Forwarded-Proto: https&#xD;&#xA;X-Forwarded-Host: idocitws.iowa.gov&#xD;&#xA;X-Forwarded-Server: idocitws.iowa.gov&#xD;&#xA;X-dynaTrace-Application: v=2;appId=ea7c4b59f27d43eb;cookieDomain=iowa.gov;rid=47306;rpid=1284950982;en=y7ily9xm&#xD;&#xA;X-dynaTrace-RequestState: agentId=0x750f07911fce6480&amp;pathDepth=1&#xD;&#xA;X-dynaTrace: FW4;-1657161762;19;533619840;90;2;921235433;1001;a6f7;2h01;3h1fce6480;4h5a;5h01;6h43e85dbef7528e4d4c50a64f696dde88;7h9f09235b9553e5ef;8h0101&#xD;&#xA;traceparent: 00-43e85dbef7528e4d4c50a64f696dde88-9f09235b9553e5ef-01&#xD;&#xA;tracestate: 36e8efe9-9d39b7de@dt=fw4;13;1fce6480;5a;2;0;0;3e9;61f0;2h01;3h1fce6480;4h5a;5h01;7h9f09235b9553e5ef;8h0101&#xD;&#xA;" />
    </item>
    <item name="APPL_MD_PATH">
      <value string="/LM/W3SVC/5/ROOT" />
    </item>
    <item name="APPL_PHYSICAL_PATH">
      <value string="D:\webapps\spd_idocit_ws\" />
    </item>
    <item name="AUTH_TYPE">
      <value string="" />
    </item>
    <item name="AUTH_USER">
      <value string="" />
    </item>
    <item name="AUTH_PASSWORD">
      <value string="*****" />
    </item>
    <item name="LOGON_USER">
      <value string="" />
    </item>
    <item name="REMOTE_USER">
      <value string="" />
    </item>
    <item name="CERT_COOKIE">
      <value string="" />
    </item>
    <item name="CERT_FLAGS">
      <value string="" />
    </item>
    <item name="CERT_ISSUER">
      <value string="" />
    </item>
    <item name="CERT_KEYSIZE">
      <value string="" />
    </item>
    <item name="CERT_SECRETKEYSIZE">
      <value string="" />
    </item>
    <item name="CERT_SERIALNUMBER">
      <value string="" />
    </item>
    <item name="CERT_SERVER_ISSUER">
      <value string="" />
    </item>
    <item name="CERT_SERVER_SUBJECT">
      <value string="" />
    </item>
    <item name="CERT_SUBJECT">
      <value string="" />
    </item>
    <item name="CONTENT_LENGTH">
      <value string="0" />
    </item>
    <item name="CONTENT_TYPE">
      <value string="" />
    </item>
    <item name="GATEWAY_INTERFACE">
      <value string="CGI/1.1" />
    </item>
    <item name="HTTPS">
      <value string="off" />
    </item>
    <item name="HTTPS_KEYSIZE">
      <value string="" />
    </item>
    <item name="HTTPS_SECRETKEYSIZE">
      <value string="" />
    </item>
    <item name="HTTPS_SERVER_ISSUER">
      <value string="" />
    </item>
    <item name="HTTPS_SERVER_SUBJECT">
      <value string="" />
    </item>
    <item name="INSTANCE_ID">
      <value string="5" />
    </item>
    <item name="INSTANCE_META_PATH">
      <value string="/LM/W3SVC/5" />
    </item>
    <item name="LOCAL_ADDR">
      <value string="192.168.8.198" />
    </item>
    <item name="PATH_INFO">
      <value string="/&amp;" />
    </item>
    <item name="PATH_TRANSLATED">
      <value string="D:\webapps\spd_idocit_ws\&amp;" />
    </item>
    <item name="QUERY_STRING">
      <value string="" />
    </item>
    <item name="REMOTE_ADDR">
      <value string="192.168.1.21" />
    </item>
    <item name="REMOTE_HOST">
      <value string="192.168.1.21" />
    </item>
    <item name="REMOTE_PORT">
      <value string="38636" />
    </item>
    <item name="REQUEST_METHOD">
      <value string="GET" />
    </item>
    <item name="SCRIPT_NAME">
      <value string="/&amp;" />
    </item>
    <item name="SERVER_NAME">
      <value string="idocitws.iowa.gov" />
    </item>
    <item name="SERVER_PORT">
      <value string="80" />
    </item>
    <item name="SERVER_PORT_SECURE">
      <value string="0" />
    </item>
    <item name="SERVER_PROTOCOL">
      <value string="HTTP/1.1" />
    </item>
    <item name="SERVER_SOFTWARE">
      <value string="Microsoft-IIS/8.5" />
    </item>
    <item name="URL">
      <value string="/&amp;" />
    </item>
    <item name="HTTP_CONNECTION">
      <value string="close" />
    </item>
    <item name="HTTP_ACCEPT">
      <value string="text/html,application/xhtml+xml,application/xml;q=0.9,application/octet-stream;q=0.9,*/*;q=0.8" />
    </item>
    <item name="HTTP_ACCEPT_ENCODING">
      <value string="gzip, br" />
    </item>
    <item name="HTTP_ACCEPT_LANGUAGE">
      <value string="en-US,en;q=0.5" />
    </item>
    <item name="HTTP_HOST">
      <value string="idocitws.iowa.gov" />
    </item>
    <item name="HTTP_USER_AGENT">
      <value string="Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 (bug-bounty research; contact https://hackerone.com/todayisnew)" />
    </item>
    <item name="HTTP_X_FORWARDED_FOR">
      <value string="178.128.13.43, 192.168.3.253" />
    </item>
    <item name="HTTP_X_BUG_BOUNTY">
      <value string="https://hackerone.com/todayisnew" />
    </item>
    <item name="HTTP_CF_RAY">
      <value string="a495755dda498e1f-SJC" />
    </item>
    <item name="HTTP_CDN_LOOP">
      <value string="cloudflare; loops=1" />
    </item>
    <item name="HTTP_CF_CONNECTING_IP">
      <value string="178.128.13.43" />
    </item>
    <item name="HTTP_TRUE_CLIENT_IP">
      <value string="178.128.13.43" />
    </item>
    <item name="HTTP_CF_IPCOUNTRY">
      <value string="US" />
    </item>
    <item name="HTTP_CF_VISITOR">
      <value string="{&quot;scheme&quot;:&quot;https&quot;}" />
    </item>
    <item name="HTTP_X_FORWARDED_PROTO">
      <value string="https" />
    </item>
    <item name="HTTP_X_FORWARDED_HOST">
      <value string="idocitws.iowa.gov" />
    </item>
    <item name="HTTP_X_FORWARDED_SERVER">
      <value string="idocitws.iowa.gov" />
    </item>
    <item name="HTTP_X_DYNATRACE_APPLICATION">
      <value string="v=2;appId=ea7c4b59f27d43eb;cookieDomain=iowa.gov;rid=47306;rpid=1284950982;en=y7ily9xm" />
    </item>
    <item name="HTTP_X_DYNATRACE_REQUESTSTATE">
      <value string="agentId=0x750f07911fce6480&amp;pathDepth=1" />
    </item>
    <item name="HTTP_X_DYNATRACE">
      <value string="FW4;-1657161762;19;533619840;90;2;921235433;1001;a6f7;2h01;3h1fce6480;4h5a;5h01;6h43e85dbef7528e4d4c50a64f696dde88;7h9f09235b9553e5ef;8h0101" />
    </item>
    <item name="HTTP_TRACEPARENT">
      <value string="00-43e85dbef7528e4d4c50a64f696dde88-9f09235b9553e5ef-01" />
    </item>
    <item name="HTTP_TRACESTATE">
      <value string="36e8efe9-9d39b7de@dt=fw4;13;1fce6480;5a;2;0;0;3e9;61f0;2h01;3h1fce6480;4h5a;5h01;7h9f09235b9553e5ef;8h0101" />
    </item>
  </serverVariables>
</error>