MVC 2: JsonRequestBehavior DenyGet

We migrated one of our projects to MVC 2 today, and one of the first things I noticed is that all my ajaxified jsony sweetness had stopped working! A quick look at the XHR revealed the following server error.

This request has been blocked because sensitive information could be disclosed to third party web sites when this is used in a GET request. To allow GET requests, set JsonRequestBehavior to AllowGet.

What the heck?

A quick Google turned up a couple articles about MVC 2's new JsonRequestBehavior, and specifically the MSDN article (the link to Haack is dead, so here's a good one). Ok, good to know. I wasn't aware of that vulnerability, but in the mean time I need this project working.

I could modify the actions to call a Json overload which accepts the JsonRequestBehavior.

  return Json(myjson, JsonRequestBehavior.AllowGet);

But since I have somewhere between 50-80 Json actions in this app, that would be a lot of find-replace. Plus, when I finish modifying my client library to use POST requests, I would have to do it all over again. A one stop solution would be much preferable.

If your project already uses a base controller class, you can do one simple override:

protected override JsonResult Json(object data, string contentType,
   Encoding contentEncoding, JsonRequestBehavior behavior)
{
   // TODO: change all my GET Json request into POST
   return base.Json(data, contentType, contentEncoding,
       JsonRequestBehavior.AllowGet);
}

Keep in mind this should be a temporary crutch only!

IIS 7 (7.5): Hosting Multiple SSL Sites On One IP

Since I continually find myself Googling this information whenever I add a new site on our wildcard cert, I figured I'd document it here.

Adding a New Binding:

Requirements:

1. A wild card SSL certificate (of the form *.domain.com). I assume the cert is already installed on your server.
2. An IP you wish to use on multiple IIS sites.
3. Two or more IIS sites with no SSL binding (I'll touch on changing a binding at the end).

With these in place, adding an SSL cert is quite simple:

1. In an elevated command prompt navigate to

   C:\Windows\System32\inetsrv

2. Enter the following command (replace {SITENAME}, {IP}, and {HOSTHEADER} with the appropriate values).

   appcmd set site /site.name:{SITENAME} /+bindings.[protocol='https',bindingInformation='{IP}:443:{HOSTHEADER}']

3. Check the selected cert in IIS via the bindings window. You can change the cert here, but you cannot change the host header.

That's it.

Changing an Existing Binding:

Changing a binding is similar to the adding binding with a few alterations to the command

appcmd set site /site.name:{SITENAME} /bindings.[protocol='https',bindingInformation='{IP}:443:{HOSTHEADER}'].bindingInformation:{NEWIP}:443:{NEWHOSTHEADER}

NHibernate: Is That Type a Proxy?

One of our applications does some reflection to map customizable content to domain objects. Anyone familiar with NHibernate and lazy loading has probably encountered proxy classes before. My problem: given a Type, I want the domain type.

It's easy to find out that proxy types extend the domain type they represent, so if I know that my Type is a proxy I can call BaseType to get the domain type. But how do I know if my Type is a proxy?

I tried numerous approaches, but the simplest I found was to look for a specific interface. Turns out proxies implement an interface called INHibernateProxy.

if (clazz.GetInterface(typeof(INHibernateProxy).FullName) != null)
    clazz = clazz.BaseType;

Now clazz represents the domain type as desired.

There are other solutions of course, such as detecting the namespace (proxies have none), and possibly checking IsAutoClass (which I couldn't confirm in any documentation). This approach seems the most reliable.

NHibernate: Mapping a Generic List of Enum

I recently ran into a case where I wanted to have a collection of an enumeration on one of my domain classes.

E.g.

public class MyDomainClass
{
   public List<MyRoleEnum> Roles { get; set; }
}

But how is do we map something like this in an xml mapping? A quick google didn't turn up the answer, so I played around a bit and found the following works as desired.

<bag name="Roles" table="MyDomainClass2Role">    
   <key column="MyDomainClassId" />    
   <element column="Role" type="MyRoleEnum" />
</bag>

To confirm this usage I checked the documentation at hibernate.org. Turns out the <element /> tag was designed for value type bags anyway.

Demote 2003 Domain Controller: NETLOGON Timeout

As you may know, I occasionally copy information here which I feel needs better exposure on the web. This is just such a post.

I recently tried to demote a server 2003 domain controller (using dcpromo), and hit the following error message:

The operation failed because:

Failed to configure the service NETLOGON as requested

"The wait operation timed out"

This is a particularly useless message because the actual problem has nothing to do with netlogon.

I corrected this problem by modifying the TCP/IP settings to point DNS at the remaining domain controller (e.g. remove 127.0.0.1 or any other IP which points to the machine being demoted).