[Bug]: Upgrade issues using web interface - (1 reason found for issue2: modSecurity module)

[fablaser]

Is there an existing issue for this?

• I have searched the existing issues

What happened?

I noticed two different issues with the DNN upgrade process when using the web interface.

When using version 10.02.03 (to test 10.03.00 rc2), clicking “Upload Package” displays a gray window instead of the drag-and-drop area. Please note that there are no errors in the logs, and AllowDnnUpgradeUpload is set to true in the web.config file.

When using version 10.2.1 (to upgrade to 10.02.03), I noticed another issue: IIS crashes during the file upload process.

Issue 1:

Issue 2:

It seems to be caused by modSecurity module, that is not in use for this webiste, but I needed to remove from modules!

I am attaching some screenshots. In order to fix issue 2 I have tried to increase maximum file size to 200Mb, but it does not fix my problem.
For Issue 2 I found this entry in Windows Application event log
Nome registro: Application
Origine: Application Error
Data: 20/03/2026 17:04:50
ID evento: 1000
Categoria attività:Eventi di arresto anomalo dell'applicazione
Livello: Errore
Parole chiave:
Utente: IIS APPPOOL\USERAPPPOOL
Computer: Octanus..local
Descrizione:
Nome applicazione con errore: w3wp.exe, versione: 10.0.26100.1882, timestamp: 0xc6bd45bd
Nome modulo non valido: ucrtbase.dll, versione: 10.0.26100.7623, timestamp: 0x53a0792e
Codice eccezione: 0xc0000409
Offset errore: 0x000000000001cba8
Id di processo in errore: 0x289C
Ora di avvio dell'applicazione in errore: 0x1DCB88190ED62BC
Percorso dell'applicazione in errore: c:\windows\system32\inetsrv\w3wp.exe
Percorso del modulo in errore: C:\WINDOWS\System32\ucrtbase.dll
Id di rapporto: e83e1d5a-929e-4121-818d-474ebc387262
Nome completo del pacchetto guasto:
ID applicativo relativo al pacchetto guasto:
XML evento:



1000
0
2
100
0
0x8000000000000000

285609


Application
xxx..local



w3wp.exe
10.0.26100.1882
c6bd45bd
ucrtbase.dll
10.0.26100.7623
53a0792e
c0000409
000000000001cba8
0x289c
0x1dcb88190ed62bc
c:\windows\system32\inetsrv\w3wp.exe
C:\WINDOWS\System32\ucrtbase.dll
e83e1d5a-929e-4121-818d-474ebc387262

Steps to reproduce?

Issue 1 using 10.02.03:

1. Try to upload Upgrade file
2. You will see empty gray div instead of drag and drop area

Issue 2 using 10.2.1:

1. Try to upload upgrade file
2. IIS will crash

Current Behavior

No response

Expected Behavior

No response

Relevant log output

Anything else?

No response

Affected Versions

10.2.3 (latest release)

What browsers are you seeing the problem on?

No response

Code of Conduct

• I agree to follow this project's Code of Conduct

[valadas]

I confirm the grey box issue is present on both 10.2.3 and current 10.3.0-rc.
I am taking a look at this...

[jeremy-farrance]

If it helps to debug anything, you might be able to get the error to NOT throw by temporarily setting the app pool's Enable 32-bit the true. But remember not to leave it that way, it should be false in production unless you have a very specific need (usually on an older project).

[fablaser]

Thank you, what about modsecurity incompatibility? It sounds very strange because I can upload files, but not upgrade package. Thanks

[valadas]

modSecurity has been known to do wonky stuff...

[valadas]

For the grey module when clicking to upload, I just submitted a fix for 10.3.0 but it will have to be a workaround for 10.2.3.
@fablaser if you manually upload the 10.3.0 package in App_Data\Upgrade folder, it should then be listed in the upgrade list and you should be able to kick the upgrade. Let us know if that part works.

[fablaser]

Yes, I tried and I confirm that it works.

[valadas]

Great thanks for testing and confirming @fablaser will be documented in the suggested upgrade path DNNCommunity/DNNDocs@864da23

[yoanhg421]

Great thanks for testing and confirming @fablaser will be documented in the suggested upgrade path DNNCommunity/DNNDocs@864da23

Please document
<add key="AllowDnnUpgradeUpload" value="true" />
This is nowhere to be found for someone coming from DNN 9.
Was looking for hours until I found this post,

[enfJoao]

DNN 10.02.03.

I updated the web config but I also get the gray pannel after clicking upload.
Only difference is that I get errors on console:

InvalidCharacterError: Failed to execute 'createElement' on 'Document': The tag name provided ('data:image/svg+xml;base64,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') is not a valid name.
    at tl (react-dom.production.min.js:199:292)
    at Bs (react-dom.production.min.js:247:81)
    at ws (react-dom.production.min.js:246:329)
    at vs (react-dom.production.min.js:246:194)
    at _s (react-dom.production.min.js:239:172)
    at react-dom.production.min.js:123:115
    at t.unstable_runWithPriority (scheduler.production.min.js:19:467)
    at qo (react-dom.production.min.js:122:325)
    at Zo (react-dom.production.min.js:123:61)
    at Qo (react-dom.production.min.js:122:496)
al @ react-dom.production.min.js:209
n.callback @ react-dom.production.min.js:226
ha @ react-dom.production.min.js:131
dl @ react-dom.production.min.js:212
xs @ react-dom.production.min.js:255
t.unstable_runWithPriority @ scheduler.production.min.js:19
qo @ react-dom.production.min.js:122
Os @ react-dom.production.min.js:248
_s @ react-dom.production.min.js:239
(anonymous) @ react-dom.production.min.js:123
t.unstable_runWithPriority @ scheduler.production.min.js:19
qo @ react-dom.production.min.js:122
Zo @ react-dom.production.min.js:123
Qo @ react-dom.production.min.js:122
R @ react-dom.production.min.js:287
Xt @ react-dom.production.min.js:68Understand this error
react-dom.production.min.js:199 Uncaught InvalidCharacterError: Failed to execute 'createElement' on 'Document': The tag name provided ('data:image/svg+xml;base64,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') is not a valid name.
    at tl (react-dom.production.min.js:199:292)
    at Bs (react-dom.production.min.js:247:81)
    at ws (react-dom.production.min.js:246:329)
    at vs (react-dom.production.min.js:246:194)
    at _s (react-dom.production.min.js:239:172)
    at react-dom.production.min.js:123:115
    at t.unstable_runWithPriority (scheduler.production.min.js:19:467)
    at qo (react-dom.production.min.js:122:325)
    at Zo (react-dom.production.min.js:123:61)
    at Qo (react-dom.production.min.js:122:496)