24

When you visit a user's profile page, the actual username in the URL isn't supposed to matter. For example, all these URLs go to the same place:
https://stackoverflow.com/users/1/jeff-atwood
https://stackoverflow.com/users/1/jeff-the-dragon
https://stackoverflow.com/users/1

However, if your username happens to end in the letters json, your profile page gets screwed up:
https://stackoverflow.com/users/1/jeffendinginjson

9
  • 3
    No actual file names, and still the ghost of file extensions as meta-data haunts us...
    – Shog9
    Commented Mar 29, 2010 at 19:30
  • 8
    Predicted fix: Disallow usernames ending in json Commented Mar 29, 2010 at 19:57
  • 4
    Methinks that someone has been playing with a route to let people download data as JSON. Might want to adjust the regex in that routing constraint.
    – tvanfosson
    Commented Mar 29, 2010 at 20:03
  • 5
    @tvanfosson: Wouldn't it be funny if he just forgot to escape the dot?
    – mmyers
    Commented Mar 29, 2010 at 20:12
  • @ベレアー アダム why do you hate me and Martin Jajson? es-es.facebook.com/mjajson
    – perbert
    Commented Mar 29, 2010 at 20:12
  • @json: I don't hate you, I'm merely the harbinger of your doom. Commented Mar 29, 2010 at 20:42
  • This receives Pollyanna's coveted LOL OF THE DAY seal. Congratulations.
    – Pollyanna
    Commented Mar 29, 2010 at 20:51
  • 2
    Badge request for lol-of-the-day in 3... 2... 1...
    – juan
    Commented Mar 29, 2010 at 21:05
  • 2
    Are the argonauts ok? Commented Mar 29, 2010 at 22:28

2 Answers 2

11

I'm sorry, I won't do it again.

4
4

Also broken: https://stackoverflow.com/users/1/web.config

4
  • 1
    ...and that's probably a good thing.
    – tvanfosson
    Commented Mar 29, 2010 at 20:04
  • 1
    ...but why that specific error?
    – Aarobot
    Commented Mar 29, 2010 at 21:18
  • 2
    totally unrelated bug Commented Mar 30, 2010 at 8:18
  • web.config is actually an IIS config file to control web access to the folder in question. It's roughly the same as .htaccess is for Apache HTTPD. If it was public accessible, it might leak sensitive information about for example folders, configs, patterns, etc, we shouldn't know about. So that it errors is only good.
    – user138231
    Commented Mar 30, 2010 at 16:54

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .