Windows Azure Discovery Day

Just got back from Windows Azure Discovery Day with Graham Elliot. Overall a good day, covering Cloud Computing Scenarios for ISVs, Understanding the Windows Azure Platform Pricing Model, Building Applications for Windows Azure & SQL Azure, then finishing off with a few demo’s.

Useful Azure links:

Fabrikam Shipping Demo

Windows Azure SDK

Windows Azure Developer Training Kit

Cloud Cover | Channel 9

Microsoft Platform Ready

Get amongst it!

Kentico vs ValidateRequest

It seems Kentico are insisting on not encoding html sent to the server from the fckEditor. Instead, Kentico advises to turn ValidateRequest off.

That’s pretty fckEd. In this post, Kentico assure us they take security seriously;

we do a lot of investigating on this issue and fix every potentially dangerous part of the system during development stage as well as later during testing stage”

It would seem to me that encoding html from the fckEditor, in order to allow ValidateRequest not to break, would be high on their list. Apparently not.

The issue I have is, not all of the website in question is the work of kentico. In fact, the bulk of the solution is custom built, while using Kentico to leverage it’s content management. Obviously then, it would be unwise to turn off ValidateRequest for the whole site.

So enough ranting about Kentico, here’s the solution. Short of hacking the entire Kentico site to htmlencode all instances of the fckEditor, we can localise turning off ValidateRequest just to Kentico pages via directory-level web.configs and keep ValidateRequest = true at the root web.config.

Add this section to Directory level web.configs for all things kentico (ie. CMSAdminControls, CMSDesk, CMSFormControls, CMSMasterPages, CMSModules, CMSPages, CMSSiteManager)

<system.web>
 <pages ValidateRequest="false" />
</system.web>

Kentico have advised they will look at fixing this issue in later releases. However, I wouldn’t hold your breath, they’ve been saying this since 2006.

So, in short, Kentico are fckEd.

Windows Phone 7 Dev Xmass drinks in Sydney

Courtesy of Nick Harrris .NET:

 

Event:
WP7Dev XMass Drinks meet and greet

Please indicate your attendance here – http://events.linkedin.com/Windows-Phone-7-Developer-XMass-Drinks/pub/496913

Purpose:
Let’s get together for some XMass Drinks and/or dinner to trade some WP7 Dev stories and demos. Event will be informal, i.e around bar tables, so bring along your device or laptop if you wish to show people what you have been up to.

Date, Time, Location:

6-8pm
Tues 14th Dec 2010
City Hotel,
Corner of King and Kent St, Sydney CBD.

Courtesy of Nick Harris .NET