The way you defined the demarcation lines is uncommon for a GWT
application. They don't usually (re)load the entry point as the user
navigates within the application. Passing data from html page to html page
via URL param is exposed publicly.  SessionStorage is could be the way to
go because the data is tied to the window although that makes it accessible
to any url loaded into that window (easy to XSS).

Changing your architecture slightly would greatly increase your security.
Wrap your modules into a single combined module that will own the page
document root. Use the new parent module to contain any session information
you want to share among the submodules. Navigate from module to module via
the parent wrapping the modules main panel. Done well, each submodule could
manifest as a kind of portlet. Code split the parent to download the Megs
of common libraries (GWT, GXT, etc) only once.




On Sat, Feb 9, 2013 at 10:18 AM, emurmur <[email protected]> wrote:

> You can set values in localstorage in one page and they can be read in
> another, provided they are in the same domain.  Localstorage is not secure,
> so do not write sensitive data into localstorage.
>
>
> On Friday, February 8, 2013 3:50:39 AM UTC-8, Visruth CV wrote:
>>
>> Hai,
>> I have many gwt modules in my project. Each module has an entry point,
>> html and css page. I want to go from one module from another module and I
>> should also be able to pass values with it. Consider, the first module
>> contains a login page and the second contains account page. After
>> authentication, how can I go to the second module (with passing some
>> details like user Id user name etc to the second module). Can anybody help
>> me please...Thanks in advance.
>>
>  --
> You received this message because you are subscribed to the Google Groups
> "Google Web Toolkit" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> To post to this group, send email to [email protected].
> Visit this group at
> http://groups.google.com/group/google-web-toolkit?hl=en.
> For more options, visit https://groups.google.com/groups/opt_out.
>
>
>



-- 
-- A. Stevko
===========
"If everything seems under control, you're just not going fast enough." M.
Andretti

-- 
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.


Reply via email to