OWASP / OWASP/Nest

Bug: Board candidates missing-resource path returns soft-404 (HTTP 200)

Open
#3,974 2 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
Python
Stars
451
Forks
702
Avg merge
22h 59m
Merged PRs (30d)
91

Description

Issue Description
The board candidates page renders a "Board not found" UI with 404 messaging, but the route still returns HTTP 200. This creates a soft-404 behavior.

Observed in:
- `frontend/src/app/board/[year]/candidates/page.tsx`

Current behavior:
- Missing board data returns ``
- HTTP response remains 200 instead of 404.

This impacts SEO/indexing and makes monitoring/caching semantics incorrect for genuinely missing resources.

Proposed Fix
For true missing-resource cases, return a real Next.js 404 response by using `notFound()` instead of only rendering 404-like UI.

Are you going to work on implementing this?

- [x] Yes
- [ ] No

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.