[OpenSocial] XSS Solution without Gadgets?

2009-06-24 Thread Andi
Hi all, i'm trying to understand since a few hours all that system. We did a Shindig implementation and now i need to implement a javascript part talking to the backend .-) the example stated in the docs like here for newDataRequest ( http://wiki.opensocial.org/index.php?title=Opensocial_(v0.8)

[OpenSocial] Re: XSS Solution without Gadgets?

2009-06-24 Thread Chris Chabot
Hey Andi, I'm not entirely sure what exactly you're trying to do and what exact error you are running into, could you possibly please provide us with a bit more info and/or code snippets of what you are doing? :) Are you manually including shindig's javascript code from your gadget, or what

[OpenSocial] Re: XSS Solution without Gadgets?

2009-06-24 Thread Andi
Hey Chris, thanks for your fast answer see my comments below, hope you can help me .-) Are you manually including shindig's javascript code from your gadget, or what javascript code is coming from where? Exactly. the current shindig Service is running locally for the moment at

[OpenSocial] Re: XSS Solution without Gadgets?

2009-06-24 Thread Chris Chabot
Ah I was afraid you were trying to do that. In the interest of saving you a lot of time and headaches: Don't... really, just don't. All the features JS code has been made for use through shindig and not through direct inclusion, it depends on lots of security, configuration, proxy and rpc data