Appending an application URL with `&up_whatever=value` will make the
value accessible using the preferences module. This is a handy thing
as you can give a URL out that passes something to the iframe like
`up_show=overview`
or
`up_show=detail&up_item=12`

However, it must be noted that anything specified like this will
OVERRIDE the real user preferences.

I can't see any exploit that this will allow, but do not blindly trust
anything at all until there is some way of getting the information
signed

Cheers!
Rick Measham


--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"OpenSocial Developers" group.
To post to this group, send email to opensocial-api@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/opensocial-api?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to