Session loss after migrating to ASP.NET 2.0

The HttpOnly attribute has been added to the Session cookie generated by ASP.NET 2.0.  This value is hardcoded and cannot be changed via a setting in the application.  While this is documented as a breaking change in the breaking changes document (linked below), it’s not clear the types of symptoms you will see in your…

2

Another SSL Termination/Acceleration gotcha in 2.0

In 1.1, we used the requireSSL attribute to ensure that the FormsAuthentication cookie has the secure attribute set.  In 2.0, if you have requireSSL set, we’ll remove the cookie from the incoming request if the web server receives the cookie over a non-secure connection. Client –> SSL –> Device –> Http –> Server Here’s the…


Nonsecure items message using Menu control over SSL

If you’re using the new menu control that ships with ASP.NET 2.0 and SSL Termination/Acceleration, you will run into this issue.   The behavior the end users will see is a warning in the browser stating something similar to: This page contains both secure and nonsecure items. Do you want to display the nonsecure items? The…

7

Debug javascript generated by webresource.axd

Ran across this the other day and thought someone else may find it useful.  Javascript for the ASP.Net 2.0 controls is typically generated by a request to webresource.axd.  For example when you add a menu control, you see the following in the page: <script src=”http://blogs.msdn.com/myapp/WebResource.axd?d=oTrMXXyr9lkT4MbMovPbCw2&amp;t=632681794331014707″ mce_src=”http://blogs.msdn.com/myapp/WebResource.axd?d=oTrMXXyr9lkT4MbMovPbCw2&amp;t=632681794331014707″ type=”text/javascript”></script> If you browse the above URL, you get…

4

Properties from Base Page Class missing in VS2005

There was a design change to the web sites in Visual Studio 2005 in which properties for custom base page classes are not parsed at design time. The result of this change is that the properties are not displayed in the Properties pane and you cannot debug any design time based code in your base…

1

Users seeing other users data in ASP.NET

One of the more difficult issues to troubleshoot deal with 2 users seeing each others data when they shouldn’t be able to.  ex. User1 sees User2’s data.  Most of the time while troubleshooting, you find that the problem reproduces if two people submit the form at the same time from different machines. Steps for troubleshooting:…

10