Bad input in "Goto Item" text field logs me out

smcleod · Post by **smcleod** » Tue Nov 16, 2004 3:07 am

From the "Recent Items" screen I entered strange text in the "Goto Item" box and clicked the "Goto Item" button.

I was sent to an error page:

Error

Error 500: The Server is unable to process your request, click the login button to go back to the login page

and had to login again.

Input included:

<b

<br>67

Would it be better just to tell me that it was not a valid item id and allow me to go back?

Steve

Guest · Post by **Guest** » Tue Nov 16, 2004 9:20 am

Hi Steve,

For most bad input in the Goto Item field, such as an incorrect item id or alpha characters instead of numbers (basically any input that is not contain html markup), you will get a message saying "item XXX doesn't exist or you don't have permission to XXX" or "XXX is not a valid item id".

Since you entered a < and > characters ASP.NET generated an HTTP 500 error so the basic HTTP error page was displayed. We should display a more informative message when the page validation fails. I will log this as a bug.

Thanks!

nalenb · Post by **nalenb** » Sat Nov 27, 2004 2:51 pm

fwiw, I entered bad bug numbers, text, and html and it always gave me a nice error message. I didn't try any large amount of html though. I'm on 1136.