dyoo/WeScheme — Issue #38: The view.jsp doesn't do enough validation on inputs, or is too difficult to share
Author: dyoo
Created: 2011-12-12 23:55:57+00:00
State: open

Looking at the exceptions happening with regards to view.jsp, I see a lot of misspelled and manually-typed in URLs, like:

GET /view?publicld=fiber-empty-aside-quite-pause

where it's an "Ld" instead of an "id", or:

GET /view?publicid=fiber-empty-aside-quite-pause

where the 'i' is not upper cased. In any event, we generate a scary looking error message, which is not the right thing to do. We should probably change the id lookup mechanism so it's less prone to errors. Maybe something like:

/view?id=...

since you can only view a program via its public id anyway, so why not just shorten the parameter name to something less difficult to type?