parvn,

"Due to some vulnerability reasons..."

That's quite vague.  You are trying to hijack GWT RPC, a system which
tunnels through HTTP, to do something "HTTP" with it, but what?  The
302 status is a redirect.  Are you trying to redirect the RPC caller
to a different location?  If so, what is the String[] response all
about?

I think you should be specific about the vulnerability mentioned
above, because you may be looking at the whole thing wrong.

Walden

On Oct 8, 11:44 am, Lothar Kimmeringer <[EMAIL PROTECTED]> wrote:
> pravn schrieb:
>
> >  I have written one RPC method  isUserAdmin() which returns String[].
> >  Due to some vulnerability reasons, i have to set the http reponse
> > status of this method  as 302.
>
> > I added following line as first line in method to change the status.
> > /////////////////////////////////////////
> >     this.getThreadLocalResponse().setStatus(302);
> > //////////////////////////////////////
>
> > No use whatever i have done. It's still returning http 200 only.
>
> I don't know the source but I assume the status will be set
> by the RemoteServiceServlet again. I haven't tried, either,
> but you might try
> getThreadLocalResponse().sendError(302, "Go away");
>
> Regards, Lothar
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/Google-Web-Toolkit?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to