Appending an application URL with `&up_whatever=value` will make the
value accessible using the preferences module. This is a handy thing
as you can give a URL out that passes something to the iframe like

However, it must be noted that anything specified like this will
OVERRIDE the real user preferences.

I can't see any exploit that this will allow, but do not blindly trust
anything at all until there is some way of getting the information

Rick Measham

You received this message because you are subscribed to the Google Groups 
"OpenSocial Developers" group.
To post to this group, send email to
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at

Reply via email to