Filed a request:
http://code.google.com/p/googleappengine/issues/detail?id=2753



On Feb 10, 8:59 pm, "Ikai L (Google)" <ika...@google.com> wrote:
> Maybe, as there are other custom protocols we may wish to support on
> Android/Apple App Store/iTunes, etc. Can you file a feature request in our
> issue tracker?
>
> http://code.google.com/p/googleappengine/issues/list
>
>
>
>
>
> On Wed, Feb 10, 2010 at 1:49 AM, Shai Levy <levys...@gmail.com> wrote:
> > Thanks for the reply!
>
> > I actually already considered what he suggested but had two reason's not to
> > do so:
> > 1. Security - to me it feels like having a html located on a server which
> > hold's "trigger" commands to an extension is a risky option and might lead
> > to code injection vulnerabilities (of course proper coding can prevent that,
> > but it's still a bit of a "back-doorish" solution)
> > 2. Writing a content scripts makes the extension more complex and isn't as
> > fun as finding the elegant solution
>
> > I didn't try the Chrome extension group yet because It seem's like like an
> > issue with GAE that can be easily fix, Do you agree with me ? I would expect
> > "createLoginURL" to recognize chrome-extension:// as a protocol at some
> > point.
>
> > Any way, thanks again for the reply
> > Shai
>
> > On Wed, Feb 10, 2010 at 4:39 AM, Ikai L (Google) <ika...@google.com>wrote:
>
> >> I actually ended up asking one of the Chrome guys for the answer to this.
> >> This is what he tells me:
>
> >> "Ah, to me it sounds like GAE's createLoginURL function doesn't recognize
> >> chrome-extension:// as a protocol.  It's appending the extension url like a
> >> relative path.
>
> >> You can tell him to redirect to something like "success.html" on his GAE
> >> app, where he can set headers to redirect back to the chrome-extension URL,
> >> although I think there may be a security precaution in Chrome to prevent
> >> doing that.  If that's the case, the developer can inject a content script
> >> into "success.html" that will notify his extension's background page and
> >> open the appropriate URL from within the extension itself."
>
> >> I'm sorry if this doesn't make sense, I'm not an expert on Chrome
> >> extension development. Have you tried their groups?
>
> >> On Tue, Feb 9, 2010 at 5:48 PM, Shai <levys...@gmail.com> wrote:
>
> >>> I would still appreciate some pointers on this issue.
>
> >>> Is the redirect limited to "http://"; otherwise the API thinks I'm
> >>> trying to send to file in my application ? any suggestion how to
> >>> overcome this ?
> >>> Is there a way to manually create the URL ?
>
> >>> Thanks
>
> >>> On Feb 4, 5:10 pm, Shai <levys...@gmail.com> wrote:
> >>> > Hi,
>
> >>> > If I try doing a redirect to a normal http site it works fine, for
> >>> > example
> >>> > UserService.createLoginURL("http://www.somewhere.com/index.html";) ;
>
> >>> > This will let me login to my Google app account and then redirect me
> >>> > towww.somewhere.com...
>
> >>> > But if I try to redirect to html in mychromeextension:
> >>> > UserService.createLoginURL("chrome-extension://[extensionid]/
> >>> > myhtml.html") ;
>
> >>> > It redirects me to:http://[myapp].
> >>> appspot.com/chrome-extension://[myextensionid]]/<http://appspot.com/chrome-extension://%5Bmyextensionid%5D%5D/>
> >>> > myhtml.html
>
> >>> > Can someone suggest a simple solution ?
> >>> > Mychromeplug-in uses Google app engine for authentication and I when
> >>> > the user is not logged in I would like to invoke a log-in page and
> >>> > give control  back to myextension
>
> >>> --
> >>> You received this message because you are subscribed to the Google Groups
> >>> "Google App Engine for Java" group.
> >>> To post to this group, send email to
> >>> google-appengine-j...@googlegroups.com.
> >>> To unsubscribe from this group, send email to
> >>> google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B
> >>>  unsubscr...@googlegroups.com>
> >>> .
> >>> For more options, visit this group at
> >>>http://groups.google.com/group/google-appengine-java?hl=en.
>
> >> --
> >> Ikai Lan
> >> Developer Programs Engineer, Google App Engine
> >>http://googleappengine.blogspot.com|http://twitter.com/app_engine
>
> >> --
> >> You received this message because you are subscribed to the Google Groups
> >> "Google App Engine for Java" group.
> >> To post to this group, send email to
> >> google-appengine-j...@googlegroups.com.
> >> To unsubscribe from this group, send email to
> >> google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B
> >>  unsubscr...@googlegroups.com>
> >> .
> >> For more options, visit this group at
> >>http://groups.google.com/group/google-appengine-java?hl=en.
>
> >  --
> > You received this message because you are subscribed to the Google Groups
> > "Google App Engine for Java" group.
> > To post to this group, send email to
> > google-appengine-j...@googlegroups.com.
> > To unsubscribe from this group, send email to
> > google-appengine-java+unsubscr...@googlegroups.com<google-appengine-java%2B 
> > unsubscr...@googlegroups.com>
> > .
> > For more options, visit this group at
> >http://groups.google.com/group/google-appengine-java?hl=en.
>
> --
> Ikai Lan
> Developer Programs Engineer, Google App 
> Enginehttp://googleappengine.blogspot.com|http://twitter.com/app_engine

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine for Java" group.
To post to this group, send email to google-appengine-j...@googlegroups.com.
To unsubscribe from this group, send email to 
google-appengine-java+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-appengine-java?hl=en.

Reply via email to