Protecting *.html files in ASP.NET

A quick and simple way of protecting *.html files in an ASP.NET web application is to enable runAllManagedModulesForAllRequests in the web.config file. In addition, set the authorization settings as required on locations that need authenticated access.

This will cause all requests to go through the authentication module, which will trigger the ASP.NET authentication mechanism. […]

Not giving up on JSF yet

I have calmed down and can now reason on what prompted my JSF rage of yesterday night. It started with <f:viewParam> not working as expected in GlassFish 4.0. <f:viewParam> is an addition in JSF 2.0 that simplifies bookmarkable URLs, one of the biggest improvements in the new JSF specifications. Yet, as simple as my test […]

Java Server Faces rage!

From We continue to see teams run into trouble using JSF– JavaServer Faces — and are recommending you avoid this technology. Teams seem to choose JSF because it is a J2EE standard without really evaluating whether the programming model suits them. We think JSF is flawed because it tries to abstract away HTML, CSS […]

Learning from a failed deployment

This morning, at work, we released an update to one of our internal applications. It involved database schema changes, data migration, and ASP.NET MVC application changes. The release went mostly well, except for the deployment of the database changes which failed when the script generated by SSDT dropped user objects. We are now revising our […]

Model-Based Testing

Robert Binder’s massive Testing Object-Oriented Systems is always on my desk. At over 1500 pages long, the book is a challenge to read cover-to-cover, but I like to peruse a few choice chapters from time to time. Binder wrote an article about the compliance testing of Microsoft’s court-ordered publication of its Windows client-server protocols in […]

Test fixtures

I know many people swear by the Arrange-Act-Assert (AAA) pattern for writing unit tests, but I have never liked it. I think it creates unnecessary duplication/repetition when the same arrangement is required in several test methods. I prefer to have the unit under test initialised to the required state before each test method is run. […]

TDD is not dead after all

Today, on Facebook, Kent Beck posted a rebuke to David Heinemeier Hansson’s “TDD is dead. Long live testing”. At the same time, Hansson also published another blog entry that looks like an attempt to appease the people who took offence to his earlier claim. His latest post bears some similarities to what I wrote about […]