Uh, that doesn't seem good.  I'm pretty sure that all web service responses 
come back with a no-cache header.  Can you run a sniffer between the flex 
client and the web service proxy to see what comes back from the proxy?  The 
no-cache header (along with an expires header) should be there.  

What browser are you using?

Matt

-----Original Message-----
From: flexcoders@yahoogroups.com [mailto:[EMAIL PROTECTED] On Behalf Of Barrau 
Antoine
Sent: Thursday, February 09, 2006 2:05 AM
To: flexcoders@yahoogroups.com
Subject: [flexcoders] Flex store services in web browser cache?

Hi everyone,
During my study on Flex security, i see something that
bother me, and i want to know if there is anyway to
disable it.
We have a classic store application that use some ATG
services to get a catalog of items.
As we were looking in the web browser cache, we see
that it contain 2 things : 
a main.mxml.swf file (everything is fine here)
and several files, one for each of my named services :


handsetsServiceImpl
OfferServiceImpl
resourceServiceImpl
etc..

if i open one of this file with a classic editor, i
can see many uncrypted informations that i don't want
everyone to see! (as the result of the last service
request, name of the java class used, etc...)
It is critical since if i get some personnal data, i
don't want everyone to be able to consult my data just
by opening a cached service file..

That look strange to me, so if anyone can tell me if
it is normal, and if there is a way to disable it, i
would be very pleased!

Thanks a lot

Antoine





        

        
                
___________________________________________________________________________ 
Nouveau : téléphonez moins cher avec Yahoo! Messenger ! Découvez les tarifs 
exceptionnels pour appeler la France et l'international.
Téléchargez sur http://fr.messenger.yahoo.com


--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com 
Yahoo! Groups Links



 




--
Flexcoders Mailing List
FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt
Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com 
Yahoo! Groups Links

<*> To visit your group on the web, go to:
    http://groups.yahoo.com/group/flexcoders/

<*> To unsubscribe from this group, send an email to:
    [EMAIL PROTECTED]

<*> Your use of Yahoo! Groups is subject to:
    http://docs.yahoo.com/info/terms/
 



Reply via email to