I got a couple exceptions in my log like this: Invalid string key ag5tzxnvbnn0cmvhbwluz3ivcximu2vzc2lvbk1vzgvsgj3p1aim.
The sequence of events that led up to this is really interesting (note that I've concluded there is nothing that GAE did wrong here, it's just that I figured y'all might find this of interest): 1) User connects up to my app and we create a "Session" object with this key: Starting Sesssion ag5tZXNvbnN0cmVhbWluZ3IVCxIMU2Vzc2lvbk1vZGVsGMDh1AIM 2) We then redirect the user to a test page where we confirm that they have decent bandwidth, that they have Java, etc: /test?session=ag5t…etc. So the next thing in the access log should be a query of that page, right? Nope. 3) The next thing that IP queries is the thing it would be sent to if the test passed, except with a different session key. My guess is that the browser had a cached copy of the test page, and ignored the fact that the ? parameter of this request was different. And, furthermore, if you compare those two keys, you can probably guess that the browser lowercased the old session key that it had. So we have a browser (or possibly a proxy server) that is caching pages without looking at the whole URL, and lowercasing URLs. How can this possibly work on the modern web??? Anyone care to guess the user agent string? Yup, you called it: "Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)" The IP resolves to a residential service provider in Japan. Yikes. -Joshua -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
