Fix is going up.
TL;DR: I made a mistake, didn't test (oops), and a typo made it to Prod.
TS;WM:
When we generate URLs for job ads, we sign them and append a sig=
querystring parameter to the URL, which we then use during the clickthrough to validate that the URL hasn't been tampered with. If the validation fails, you get the page shown in the question up there.
I recently made a change to the validation code, and in a supreme derp moment.. I failed to test it before pushing to Prod (boooooo hissssss I know). Unbeknownst to me, I had a wrong value for the initializer in a for loop:
- for (var i = 0; i < max; ++i) // <- wrong
+ for (var i = offset; i < max; ++i) // <- right
This essentially caused the IsValid
check to return false
for... well... everything.
So yeah.. totally my screw up. Apologies. Next round of virtual beverages on me.
PS: I'll also be adding some automated tests to ensure this doesn't happen again.