thoughtworksza / bookworm Goto Github PK

The site currently shows stack traces for 500s and a server error page on 404s. Create custom 500 and 404 pages.

The domain (puku.co.za) is currently hard coded in the construction of the user confirmation link emailed to new users. This needs to be fixed to dynamically figure out the domain.

The registration application bootstrapping page does not currently work as it requires a role for the new user. This work will likely include a small change to BirdBrain to ensure that indices are fresh when adding users to a role.

The site currently throws a 500 when sending emails locally, because email credentials are now read from config. This is an improvement over how it worked before, where emails were sent from the production email address when testing locally.

When accessing URLs like:

/News/8993/Children&

or

/News/7169/Bekroonde-jeugboek-binnekort-&

The following exception is thrown:

    [HttpException: A potentially dangerous Request.Path value was detected from the client (&).]

       at System.Web.HttpRequest.ValidateInputIfRequiredByConfig()
       at System.Web.HttpApplication.PipelineStepManager.ValidateHelper(HttpContext context)

An IIS error page is shown instead of the generic Puku error page.

Possible solutions:

• Intercepting all requests and stripping out ampersands
• Using requestPathInvalidCharacters in web.config to allow ampersands

This was found to be due to a method which sets the some meta information on the page based on the description of the book. The method did not cater for cases where the description was longer than 155 characters, but with no spaces after 155 characters.

When accessing a book that does not exist at the moment, a 500 is thrown. Ensure that a request for a non-existent book returns a 404 (e.g. /Books/1234).