Does Ajax work in Direct Connect Mode?
Hello List,
I have to run the WebObjects application in Direct Connect Mode as we use a
custom load balancer, and do not want to have Apache involved.
Does anyone know if it is possible to use Ajax in Direct Connect Mode?
I am using AjaxExpansion, but an onclick on the Ajax Request does not show
the expansion at all as if the Ajax Request is not responding?
td align = left a href=javascript:void(0)
title=Contacts id=e_0_19_11_15_3_0_1_7 onclick=new
Ajax.Request('/cgi-bin/WebObjects/MyApplication.woa/ajax/hIx5tfcvDbtSkix65OJQQw/9.0.19.11.15.3.0.1.7',
{asynchronous:false, evalScripts:false, onSuccess:function(v)
{openAMD_ContactInfoModalDialog();}}); return false; Contacts/a /td
I use Apache to serve static resources contents, so maybe I need to send an
explicit request to the web server for Ajax requests?
Thanks for any suggestions,
-mai
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Your slides from WOCommunity : Deployment of WebObjects applications on CentOS Linux
Hi Pascal, I am reviewing your slides about Deploying WebObjects on Linux (from WOWODC a while ago). I can either install Java JDK (or JRE) 32/64 bit on an Oracle Linux 5.8 machine. According to your slides, it seems like the 32 bit Java version is preferable as it would eat less Memory (if RAM is an issue). Is this correct? Is there any performance penalty when installing/ using Java 32-bit on a 64-bit machine? Thanks for any info, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Using WebLogic as a servlet container?
Hello List, I wonder if any of you has had experience moving a WebObjects app (5.4.x) to run as a servlet inside a BEA WebLogic container on Linux? There is not much information aside from Chapter 10 in Practical WebObjects about WebObjects and J2EE, and the wiki has some info deploying a WebObjects app with Tomcat, but there is no info with WebLogic. I would appreciate any additional links/ references? Any real-world experience? Any limitations, gotchas to be aware of? Thank you for any insight, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Direct Action help?
Hi List, I have read David LeBer's very good blog about Direct Actions, but I am still unclear how to get the http response returned by a DA? Or is it possible? For example, I have the following code, as the redirect is needed to call a DA to do further validation. The DA inside the URL (that I do not control) will return an HTTP Response with the proper status etc. redirectL = new WORedirect(context()); redirectL.setUrl(validateURLS()); // the validateURLS contains a DA with a set of params responseL = redirectL.generateResponse(); // How to get the HTTP response from above DA? // DEBUG responseL.contentString(); == Return NULL / Empty string The above response is returned as empty, and I get an error Your request generates an error ,so how do you grab an HTTP response back from a DA? Thanks for any hints, mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: Direct Action help?
Yes, if I can call performActionNamed: to get a WOActionResults and get the response. But the problem is that I need to call a validateURLS() which calls an external app to do validation. Maybe I have to use WODirectActionRequestHandler directlynot sure. thanks On Dec 21, 2012, at 2:02 PM, John Huss wrote: A redirect does not have a content body, just a status code and a Location header. On Fri, Dec 21, 2012 at 3:48 PM, Mai Nguyen brightmornin...@gmail.com wrote: Hi List, I have read David LeBer's very good blog about Direct Actions, but I am still unclear how to get the http response returned by a DA? Or is it possible? For example, I have the following code, as the redirect is needed to call a DA to do further validation. The DA inside the URL (that I do not control) will return an HTTP Response with the proper status etc. redirectL = new WORedirect(context()); redirectL.setUrl(validateURLS()); // the validateURLS contains a DA with a set of params responseL = redirectL.generateResponse(); // How to get the HTTP response from above DA? // DEBUG responseL.contentString(); == Return NULL / Empty string The above response is returned as empty, and I get an error Your request generates an error ,so how do you grab an HTTP response back from a DA? Thanks for any hints, mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/johnthuss%40gmail.com This email sent to johnth...@gmail.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: Direct Action help?
There is a package in Project Wonder named er.extensions.net.http; author ishimoto based on the Apache commons. Not sure if anyone is using it? thanks. On Dec 21, 2012, at 4:59 PM, Ramsey Gurley wrote: The comment from one of my commits to a HttpClient utils class: Seriously, they default to US-ASCII on requests and ISO-8859-1 on responses? WTH man? Response should have a charset anyway, but explicitly setting UTF-8 just in case. It's better than URLConnection, yes. Just don't assume the defaults make any sense. Ramsey On Dec 21, 2012, at 4:27 PM, Mai Nguyen wrote: Actually HTTPClient from ApacheCommons looks much less daunting than java.net.HttpURLConnection, so I will give it a try. Thanks for the suggestions. On Dec 21, 2012, at 2:22 PM, Chuck Hill wrote: It does not sound like you want a direct action. I think you want something more like java.net.HttpURLConnection or HTTPClient from the Apache commons. Chuck ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/rgurley%40smarthealth.com This email sent to rgur...@smarthealth.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
ERXNSLogLog4jBridge (solved)
Hello, I was on the wrong track, so I solved this issue already. Thanks for your time. ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
ERXNSLogLog4jBridge
Hello List, I wonder if someone can explain the following property and its usage? er.extensions.ERXNSLogLog4jBridge.ignoreNSLogSettings Whichever value I used (true or false), the NSLog output is not directed to a log4J appender as it should. My application does not use ERXApplication (not a Wonder application) so I use the traditional approach to set up log4j, something like: // Log4J initialization final URL log4jFile = resourceManager().pathURLForResourceNamed(log4j.properties, null, null); System.out.println(Log4j file (from .woa): + log4jFile); PropertyConfigurator.configure(log4jFile); final Logger appLog = Logger.getLogger(Application.class); // Setting up logging for NSLog final NSLog.Log4JLogger debug = new NSLog.Log4JLogger(appLog, NSLog.DebugLevelDetailed); final NSLog.Log4JLogger err = new NSLog.Log4JLogger(appLog, NSLog.DebugLevelCritical); final NSLog.Log4JLogger out = new NSLog.Log4JLogger(appLog, NSLog.DebugLevelInformational); NSLog.setErr(err); // DOES NOT WORK, NSLog output is not redirected to log4J NSLog.setOut(out); // DOES NOT WORK, NSLog output is not redirected to log4J NSLog.setDebug(debug);// DOES NOT WORK, NSLog output is not redirected to log4J appLog.debug(Log4j has been initialized); Thanks for your help, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: Opening multiple database channels
Hi John, I am just curious: Is it possible to run EOF and Cayenne side by side in the same WO app, or does one have to switch over completely to Cayenne? thanks, mai On Mar 23, 2012, at 10:56 AM, John Huss wrote: Cayenne supports this kind of concurrency and will utilize multiple connections to the database without requiring a duplicate stack like EOF does. So for concurrency it is a much better choice than EOF. And it's easy to get started if you're familiar with EOF already. It can be used inside a WO app with no problems. John On Fri, Mar 23, 2012 at 10:58 AM, Ramsey Gurley ramseygur...@gmail.com wrote: My main goal is to better understand EOF conceptually :-) I was playing with the ERXOSCPool just for kicks and found a leak. I wondered why an entirely new OSC was even needed to make a second connection to the db. Seems like overkill. So I fugetuboutit. Later, I'm rereading through the old docs and find that little gem about opening new database channels. It seems that at least conceptually, creating new channels would be the proper way to handle multiple connections to the database. But it doesn't work. After finding the object store lock… I wonder if it ever worked? The fact that it was documented makes me think that maybe once upon a time, it worked. However, this wouldn't be the first time the docs were totally wrong. The fact that it suggests making every session in the app a listener for that notification only reinforces my suspicions that the docs were just wrong. Because of the lock, that notification is only ever fired once. So it's possible to create multiple connections, but only one of them will ever be used. The docs also suggest that an EODatabase may have multiple EODatabaseContexts. But then this will have the same problem with the object store lock and may even exhibit the same problem that results in leaks in the OSCPool. I'm coming to the conclusion that the best way to distribute load across multiple channels would be to simply have multiple instances of an app. Knowing that would definitely have an influence on any sort of bulk processing operations I might design in the future. I also wonder if this information can be used to implement more effective load balancing. No reason to direct users to an instance if one user on that instance has EOF tied up fetching a large blob out of the database for instance. I'll have to look for the location of the load balancer in WO sometime. I'd like to see how it works. Anyway, thanks for all the input everyone :-) I think I understand the point of the object store lock now. Ramsey On Mar 22, 2012, at 7:53 PM, Chuck Hill wrote: OK, so... my first question has to be what is your goal? What are you trying to accomplish? This is NOT going to make EOF multi-threaded. Chuck On 2012-03-22, at 7:34 PM, Ramsey Gurley wrote: Hi all, I'm looking at trying to open multiple database channels in a single instance of a WO app. No reason, just wondering if it can be done. I know there's ERXObjectStoreCoordinator pool, but this conceptually seems like the wrong way to do it. Maybe I want 4 open connections for one database, but only one on another… whatever. So I have a look at https://developer.apple.com/legacy/mac/library/documentation/WebObjects/Enterprise_Objects/Connecting/Connecting.html#//apple_ref/doc/uid/TP30001011-CH210-TPXREF145 and this seems to be the answer to my question. Well, until I try it. It turns out that inside of objectsWithFetchSpec on EOEditingContext, the objectstore is locked before a fetch takes place. As a result, no other fetch can proceed until the object store is unlocked. The answer seemed suspicious in the fact that it's being done on the Session anyway... So, I guess my question boils down to… is it even possible? Is this the 'single EOF lock' that Chuck Hill and Ravi Mendis were referring to in a previous list message? Thanks, Ramsey ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/webobjects-dev/chill%40global-village.net This email sent to ch...@global-village.net -- Chuck Hill Senior Consultant / VP Development Practical WebObjects - for developers who want to increase their overall knowledge of WebObjects or who are trying to solve specific problems. http://www.global-village.net/gvc/practical_webobjects ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription:
Re: Ajax framework and prototype.js 1.7
Hello, Has anyone used Chosen with a WOPopUpButton? The Chosen example shows a simple list with existing values, so I wonder how an example would work with WO Elements, like a popup button when the list data needs to be fetched from the database. thanks for any pointers, -mai On Jan 6, 2012, at 10:09 AM, ISHIMOTO Ken wrote: jQuery and the Ajax Frameworks work great together. On 2012/01/06, at 15:46, Jérémy DE ROYER [INGENCYS] wrote: Why not using jQuery it's easy to use with prototype ? Jérémy Le 6 janv. 2012 à 14:57, James Cicenia a écrit : Perfect! I am taking an old Noxymo app and rewriting the front end without noxymo and with wonder and ajax. And this little javascript framework nails some UI features I want to implement. James On Jan 6, 2012, at 5:23 AM, Hugi Thordarson wrote: Good morning! Just wondering if anyone has tried upgrading Ajax framework's prototype.js to version 1.7? I'd like to use a plugin that requires the current version, specifically, the most awesome Chosen plugin ( http://harvesthq.github.com/chosen/ ). Cheers, - hugi ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/james%40jimijon.com This email sent to ja...@jimijon.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/jeremy.deroyer%40ingencys.net This email sent to jeremy.dero...@ingencys.net ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/ken%40ksroom.com This email sent to k...@ksroom.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/brightmorning17%40gmail.com This email sent to brightmornin...@gmail.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
AjaxFileUpload UploadProgress binding
Hello List,Does anyone have an example of using an AjaxFileUpload where an actual file is uploaded?I have looked at the Ajax Example in Project Wonder, in particular FileUploadExample, and I used identical bindings in my test, but my upload is stuck after displaying the "Upload Starting... " message:AjaxFileUpload : AjaxFileUpload { allowCancel = true; uploadProgress = uploadProgress; finishedAction = uploadFinished;}where uploadProgress is just defined as:public AjaxUploadProgress _uploadProgress;If I use AjaxFlexibleFileUpload, the file is uploaded properly, but I would rather use the standard upload.Anyone has any hints?Thanks for your help,mai ___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Re: AjaxFileUpload UploadProgress binding
Hi Michael,
If you can share it on the list, we could send you some feedback.
Moving forward, it would be nice to have such a component, but would it
integrate well into an existing component?
thanks,
mai
On Nov 28, 2011, at 7:41 PM, Michael Kondratov wrote:
Hello,
I am working on an HTML5 drag and drop multi file upload component. I
can share or try to submit it to WOnder if there is interest.
Michael Kondratov
Aspire Auctions, Inc.
On Nov 28, 2011, at 10:39 PM, Mai Nguyen wrote:
Hello List,
Does anyone have an example of using an AjaxFileUpload where an actual file
is uploaded?
I have looked at the Ajax Example in Project Wonder, in particular
FileUploadExample, and I used identical bindings in my test, but my upload
is stuck after displaying the Upload Starting... message:
upload3.tiff
AjaxFileUpload : AjaxFileUpload {
allowCancel = true;
uploadProgress = uploadProgress;
finishedAction = uploadFinished;
}
where uploadProgress is just defined as:
public AjaxUploadProgress _uploadProgress;
If I use AjaxFlexibleFileUpload, the file is uploaded properly, but I would
rather use the standard upload.
Anyone has any hints?
Thanks for your help,
mai
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/michael%40aspireauctions.com
This email sent to mich...@aspireauctions.com
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Re: Apache DocumentRoot setting?
Hello Ute and Aaaron, Thanks for your suggestions. It looks like Ute might be on the right track. I noticed that I did not have any issue with the .gif images, so I will transform the .tiff into .gif. Just to clarify: The issue was with the Mozilla/Firefox browser not able to display .tiff, Safari can do it fine. Thanks and best regards, -mai On Aug 29, 2011, at 10:31 PM, ute Hoffmann wrote: Hi, Could the type of the image (tiff) be the problem? It is not a common Web Browser type. Perhaps safari knows how to display tiff images and other browser do not know? Just a guess. Regards, Ute Am 29.08.2011 um 23:52 schrieb arosenzw...@clinworx.com: Hi Mai, The part about viewing imagexyz.tiff in Safari but not in Firefox is probably due to local cache on Safari. In other words, if you were to quit Safari and try again or purposely refresh the web browser it will ping Apache and come back with nothing. Unless there is a funky setting that serves up pages differently based on browser type, Apache will treat both Safari and Firefox the same way. Another way to say it is you tricked yourself by modifying Apache settings *after* viewing the image in Safari then you probably viewed it for the first time in Firefox... thus the discrepancy. -- Aaron Date: Fri, 26 Aug 2011 12:34:42 -0700 From: Mai Nguyen brightmornin...@gmail.com Subject: Apache DocumentRoot setting? To: WebObjects Development webobjects-dev@lists.apple.com Message-ID: 3a398190-0a26-4ab1-970b-5819ad016...@gmail.com Content-Type: text/plain; charset=us-ascii Dear List, I have searched the list, but did not see much discussion about this topic. Is there a need to set the DocumentRoot in Apache httpd.conf to the standard /Library/WebServer/Documents? I found that using Safari, the /WebObjects/MyApp.woa/Contents/WebServer/Resources/imagexyz.tiff can be found without setting the Apache Document root in httpd.conf, but it does not work for other browsers like Firefox. Can someone explain the difference between WODocumentRoot and DocumentRoot (Apache)? Can one use either one? Any enlightened tips are much appreciated, thanks, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/u.hoffmann%40tt-pixelmind.com This email sent to u.hoffm...@tt-pixelmind.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/brightmorning17%40gmail.com This email sent to brightmornin...@gmail.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Apache DocumentRoot setting?
Dear List, I have searched the list, but did not see much discussion about this topic. Is there a need to set the DocumentRoot in Apache httpd.conf to the standard /Library/WebServer/Documents? I found that using Safari, the /WebObjects/MyApp.woa/Contents/WebServer/Resources/imagexyz.tiff can be found without setting the Apache Document root in httpd.conf, but it does not work for other browsers like Firefox. Can someone explain the difference between WODocumentRoot and DocumentRoot (Apache)? Can one use either one? Any enlightened tips are much appreciated, thanks, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: Help from security gurus?
Hi Chuck,
I found the culprit.
If by any chance, you have an Ajax type which starts with a script and
preceding the Ajax element, you have a malicious script, then that script would
be executed.
The thing is to prevent it completely, but even scrubbing it may still get
executed in Javascript, as the Javascript parser is active. So it is better not
to have any script at all, and do it some other way.
thanks,
mai
On Aug 15, 2011, at 10:47 AM, Chuck Hill wrote:
Hi Mai,
I am confused. That HTML looks like it was added on the server. Are you
using an Ajax component that is adding this to your page?
Chuck
On 2011-08-12, at 4:57 PM, Mai Nguyen wrote:
Hello,
I am really baffled at how someone can insert a A target link into the
following WebObjects page:
.
td amp;#x5b;Enter brief description of
issueamp;#x28;samp;#x29;amp;#x5d;
br/
a href=javascript:void(0); onClick=show_summary(this);
return false;Show Summary/a
nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
A target=[Enter brief description of
issue(s)]
onClick=window.open('/cgi-bin/WebObjects/MyTestApp.woa/1/wo/TTx5ltJlAYLbrboJWoAQyw/4.0.19.13.7.11.1.5.7.7.3.1.11','[Enter
brief description of
issue(s)]','toolbar=no,location=no,status=no,menubar=no,resizable=yes,scrollbars=yes,width=900,height=600');
return false
href=/cgi-bin/WebObjects/MyTestApp.woa/1/wo/TTx5ltJlAYLbrboJWoAQyw/4.0.19.13.7.11.1.5.7.7.3.1.11Show
Details/A
/td
..
All input fields are verified and sanitized.
Could someone inject this A link from the above onClick=show_summary()
java script?
Many thanks for your advice,
-mai
--
Chuck Hill Senior Consultant / VP Development
Practical WebObjects - for developers who want to increase their overall
knowledge of WebObjects or who are trying to solve specific problems.
http://www.global-village.net/products/practical_webobjects
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Integrating WO with OSWASP ESAPI
Hello, This may be a bit OT, because I am currently using WO with OSWASP. A while ago, there were a couple of you who mentioned using OSWASP ESAPI for Java to validate input and do output filtering. I wonder what would be a good filtering method in ESAPI for filtering any scripts (output filtering)? I have tried ESAPI.encoder().encodeForHTML(), but it still seems to let the browser execute some tags when the page is rendered. The brute force would be to do a string parser to parse any offending tags after encoding/decoding, but I am looking at some existing vetted solutions. Anyone has had similar experience before? Thanks very much for any hints, mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Help from security gurus?
Hello,
I am really baffled at how someone can insert a A target link into the
following WebObjects page:
.
td amp;#x5b;Enter brief description of issueamp;#x28;samp;#x29;amp;#x5d;
br/
a href=javascript:void(0); onClick=show_summary(this);
return false;Show Summary/a
nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;nbsp;
A target=[Enter brief description of
issue(s)]
onClick=window.open('/cgi-bin/WebObjects/MyTestApp.woa/1/wo/TTx5ltJlAYLbrboJWoAQyw/4.0.19.13.7.11.1.5.7.7.3.1.11','[Enter
brief description of
issue(s)]','toolbar=no,location=no,status=no,menubar=no,resizable=yes,scrollbars=yes,width=900,height=600');
return false
href=/cgi-bin/WebObjects/MyTestApp.woa/1/wo/TTx5ltJlAYLbrboJWoAQyw/4.0.19.13.7.11.1.5.7.7.3.1.11Show
Details/A
/td
..
All input fields are verified and sanitized.
Could someone inject this A link from the above onClick=show_summary() java
script?
Many thanks for your advice,
-mai
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
WebObjects vulnerabilities?
Hello, I have found some good information about WebObjects and security at the following wiki link: http://en.wikibooks.org/wiki/WebObjects/Web_Applications/Development/Authentication_and_Security However, there is no mention about SQL injections which seems to be an active subject lately. Is WebObjects pretty safe, as there is no need to generate SQL directly and access to the DB is going through the EOs normally? Are there any other loopholes that I am not aware of? About the following article: http://support.apple.com/kb/TA26730?viewlocale=en_US Would the normal WebObjects behavior be pretty safe if one does not allow the user to enter HTML tags? Does Project Wonder do something in this area? Many thanks for your advice, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: WebObjects vulnerabilities?
Do you mean the issue of malicious HTML tags? I wonder what would be the best way to prevent those? thanks, mai On Jul 11, 2011, at 6:36 PM, George Domurot wrote: If you output strings with escapeHTML=false, you could have an issue. You may want to consider stripping all potential tags from strings prior to rendering, or at the time of entry. -G On Jul 11, 2011, at 6:01 PM, Mai Nguyen wrote: Hello, I have found some good information about WebObjects and security at the following wiki link: http://en.wikibooks.org/wiki/WebObjects/Web_Applications/Development/Authentication_and_Security However, there is no mention about SQL injections which seems to be an active subject lately. Is WebObjects pretty safe, as there is no need to generate SQL directly and access to the DB is going through the EOs normally? Are there any other loopholes that I am not aware of? About the following article: http://support.apple.com/kb/TA26730?viewlocale=en_US Would the normal WebObjects behavior be pretty safe if one does not allow the user to enter HTML tags? Does Project Wonder do something in this area? Many thanks for your advice, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/george%40boxofficetickets.com This email sent to geo...@boxofficetickets.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: WebObjects vulnerabilities?
Would it be sufficient to make sure that input strings (WOStrings) have escapeHTML = true? or is it better to just strip HTML ourselves? The wiki says: If you are certain that your strings have no characters in them which might be interpreted as HTML control characters, you get better performance if you set escapeHTML to false. Is there any noticeable performance penalty if one sets escapeHTML to true? thanks, mai On Jul 11, 2011, at 6:43 PM, Mike Schrag wrote: You have to be mindful of ever rendering any tainted strings ... Any string that came from user input should be considered a risk for cross site scripting, so that's any field editable by a user, or any query parameter, etc. If you append those strings to response or WOString render them, make sure to escape HTML or strip HTML. ms On Jul 11, 2011, at 9:41 PM, Mai Nguyen wrote: Do you mean the issue of malicious HTML tags? I wonder what would be the best way to prevent those? thanks, mai On Jul 11, 2011, at 6:36 PM, George Domurot wrote: If you output strings with escapeHTML=false, you could have an issue. You may want to consider stripping all potential tags from strings prior to rendering, or at the time of entry. -G On Jul 11, 2011, at 6:01 PM, Mai Nguyen wrote: Hello, I have found some good information about WebObjects and security at the following wiki link: http://en.wikibooks.org/wiki/WebObjects/Web_Applications/Development/Authentication_and_Security However, there is no mention about SQL injections which seems to be an active subject lately. Is WebObjects pretty safe, as there is no need to generate SQL directly and access to the DB is going through the EOs normally? Are there any other loopholes that I am not aware of? About the following article: http://support.apple.com/kb/TA26730?viewlocale=en_US Would the normal WebObjects behavior be pretty safe if one does not allow the user to enter HTML tags? Does Project Wonder do something in this area? Many thanks for your advice, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/george%40boxofficetickets.com This email sent to geo...@boxofficetickets.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/mschrag%40pobox.com This email sent to msch...@pobox.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
How to keep the container updated with AjaxUpdateLink?
Hello Ajax gurus,
I am using the AjaxUpdateLink to update a table inside a page instead of
refreshing the whole page.
However, the link only refreshes the Ajax Update Container (which wraps the
table) briefly while the user clicks on the link.
Can someone point to me how to make sure the container remains updated until
the user clicks on the link again to hide the contents?
I wish to allow the user to explicitly click on Hide Explanation to hide the
explanation.
Currently with the following wod description, an onClick causes the link to
update the container correctly, but it only lasts a few seconds, then the
update container returns to its previous state.
Here is the description of the link:
ExplanationLink: AjaxUpdateLink {
updateContainerID = SearchResultsUpdateContainer1;
action = showStatusExplanation;
onClick = show_explanation(this);
evalScripts = true;
onComplete = SearchResultsUpdateContainer1Update();
}
function show_explanation(element) {
case_number = element.parentNode.parentNode.id;
explanation_row = document.getElementById(case_number +
_status);
if (element.innerHTML == What does this mean?) {
element.innerHTML = Hide Explanation;
explanation_row.style.display = '';
} else {
element.innerHTML = What does this mean?;
explanation_row.style.display = 'none';
}
};
public WOActionResults showStatusExplanation() {
return null;
}
Is an action binding required here? If yes, since the onClick JS Script already
takes care of the display, can the action just return null?
Thanks for any hints,
-mai
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Re: How to keep the container updated with AjaxUpdateLink?
Hi Chuck,
thanks for the explanation.
It is much simpler than I thought.
-mai
On May 9, 2011, at 3:28 PM, Chuck Hill wrote:
Hi Mai,
On May 9, 2011, at 1:59 PM, Mai Nguyen wrote:
Hello Ajax gurus,
I am using the AjaxUpdateLink to update a table inside a page instead of
refreshing the whole page.
However, the link only refreshes the Ajax Update Container (which wraps the
table) briefly while the user clicks on the link.
Can someone point to me how to make sure the container remains updated until
the user clicks on the link again to hide the contents?
I wish to allow the user to explicitly click on Hide Explanation to hide
the explanation.
Currently with the following wod description, an onClick causes the link to
update the container correctly, but it only lasts a few seconds, then the
update container returns to its previous state.
You are doing it wrong. :-) The AjaxUpdateLink is to update the browser
display with new information from the server. You are just updating the DOM
here so there is no need for a trip to the server. Try this instead:
ExplanationLink: WOHyperlink {
action = context.page; // Not used, but keeps WO happy
onClick = show_explanation(this); return false;;
}
function show_explanation(element) {
case_number = element.parentNode.parentNode.id;
explanation_row = document.getElementById(case_number +
_status);
if (explanation_row.style.display != 'none') {
element.innerHTML = Hide Explanation;
explanation_row.style.display = 'none';
} else {
element.innerHTML = What does this mean?;
explanation_row.style.display = '';
}
};
Chuck
Here is the description of the link:
ExplanationLink: AjaxUpdateLink {
updateContainerID = SearchResultsUpdateContainer1;
action = showStatusExplanation;
onClick = show_explanation(this);
evalScripts = true;
onComplete = SearchResultsUpdateContainer1Update();
}
function show_explanation(element) {
case_number = element.parentNode.parentNode.id;
explanation_row = document.getElementById(case_number +
_status);
if (element.innerHTML == What does this mean?) {
element.innerHTML = Hide Explanation;
explanation_row.style.display = '';
} else {
element.innerHTML = What does this mean?;
explanation_row.style.display = 'none';
}
};
public WOActionResults showStatusExplanation() {
return null;
}
Is an action binding required here? If yes, since the onClick JS Script
already takes care of the display, can the action just return null?
Thanks for any hints,
-mai
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/chill%40global-village.net
This email sent to ch...@global-village.net
--
Chuck Hill Senior Consultant / VP Development
Come to WOWODC this July for unparalleled WO learning opportunities and real
peer to peer problem solving! Network, socialize, and enjoy a great
cosmopolitan city. See you there! http://www.wocommunity.org/wowodc11/
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
AjaxExpansion expanded flag binding problem?
Dear List,
I tried to solve the problem of using the AjaxExpansion per row inside a
repetition and providing a unique expanded flag binding per row.
Since each row matches a particular product, the binding of expanded is set
to the visible flag of each product in the array by using a setter/getter
method.
If I use a public instance variable, such as a global isVisible flag, this
would work like the AjaxExample, but the global instance variable is not
suitable for each row in a repetition.
I do not understand why the binding to a setter/getter method would fail?
Thanks for any hints,
-mai
CurrentProductRepetition: WORepetition {
item = bundleProductItem;
list = currentMainBundleProducts;
index = logIndex;
}
AgreementDetailsAjaxExpansion : AjaxExpansion {
id = ~AgreementDetailsAjaxExpansion + logIndex;
insertion = Effect.blind;
insertionDuration = 0.1;
string = Agreement Details;
expanded = isAgreementDetailsVisibleForBundleProductItem;
}
In the java file, I have the following simple code:
public boolean isAgreementDetailsVisibleForBundleProductItem() {
return (bundleProductItemC.isAgreementDetailsVisible());
}
public void setIsAgreementDetailsVisibleForBundleProductItem(boolean aValue) {
bundleProductItemC.setIsAgreementDetailsVisible(aValue);
}
==
// Methods used in AjaxExpansion for bundle product
public boolean isAgreementDetailsVisibleC = false;
public boolean isAgreementDetailsVisible() {
return isAgreementDetailsVisibleC;
}
public void setIsAgreementDetailsVisible(boolean value) {
isAgreementDetailsVisibleC = value;
}
However, at runtime, I would get the following exception:
com.webobjects.foundation.NSKeyValueCoding$UnknownKeyException message
'[CustomerSummary name: CustomerSummary subcomponents: {0.15.13.7.1.5.0.1.3 =
er.ajax.AjaxExpansion name: er.ajax.AjaxExpansion subcomponents: null ;
0.15.13.7.1.7 = er.ajax.AjaxModalDialog name: er.ajax.AjaxModalDialog
subcomponents: null ; } takeValueForKey()]: attempt to assign value to
unknown key: 'isAgreementDetailsVisibleForBundleProductItem'.
This WOComponent does not have an instance variable of the name
isAgreementDetailsVisibleForBundleProductItem or
_isAgreementDetailsVisibleForBundleProductItem, nor a method of the name
setIsAgreementDetailsVisibleForBundleProductItem or
_setIsAgreementDetailsVisibleForBundleProductItem' object 'CustomerSummary
name: CustomerSummary subcomponents: {0.15.13.7.1.5.0.1.3 =
er.ajax.AjaxExpansion name: er.ajax.AjaxExpansion subcomponents: null ;
0.15.13.7.1.7 = er.ajax.AjaxModalDialog name: er.ajax.AjaxModalDialog
subcomponents: null ; } ' key 'isAgreementDetailsVisibleForBundleProductItem'
at
com.webobjects.appserver.WOComponent.handleTakeValueForUnboundKey(WOComponent.java:1781)
at
com.webobjects.foundation.NSKeyValueCoding$Utility.handleTakeValueForUnboundKey(NSKeyValueCoding.java:519)
at
com.webobjects.foundation.NSKeyValueCoding$_KeyBinding.setValueInObject(NSKeyValueCoding.java:899)
at
com.webobjects.foundation.NSKeyValueCoding$DefaultImplementation.takeValueForKey(NSKeyValueCoding.java:1354)
at
com.webobjects.appserver.WOComponent.takeValueForKey(WOComponent.java:1748)
at
com.webobjects.foundation.NSKeyValueCoding$Utility.takeValueForKey(NSKeyValueCoding.java:469)
at
com.webobjects.foundation.NSValidation$DefaultImplementation.validateTakeValueForKeyPath(NSValidation.java:679)
at
com.webobjects.appserver.WOComponent.validateTakeValueForKeyPath(WOComponent.java:1424)
at
com.webobjects.appserver._private.WOKeyValueAssociation.setValue(WOKeyValueAssociation.java:76)
at
ognl.helperfunction.WOHelperFunctionKeyValueAssociation.setValue(WOHelperFunctionKeyValueAssociation.java:21)
at
com.webobjects.appserver.WOComponent.setValueForBinding(WOComponent.java:910)
at er.ajax.AjaxExpansion.setExpanded(AjaxExpansion.java:138)
at er.ajax.AjaxExpansion.toggle(AjaxExpansion.java:146)
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Re: AjaxExpansion expanded flag binding problem?
After more tweaking, I got it to work by binding it to a boolean variable
instead (the setter/getter binding does not seem to work, so this may be a
useful note for others in the future), and make this boolean unique to each row.
thanks,
mai
On Apr 13, 2011, at 5:04 PM, Henrique Gomes wrote:
Long shot, try removing the 'is' from the binding:
expanded = agreementDetailsVisibleForBundleProductItem;
Also, make sure the code the app is using is the code you are looking at.
Clean your project, look for other mistakes.
Good luck,
Henrique Gomes
On Apr 14, 2011, at 12:08 AM, Mai Nguyen wrote:
Dear List,
I tried to solve the problem of using the AjaxExpansion per row inside a
repetition and providing a unique expanded flag binding per row.
Since each row matches a particular product, the binding of expanded is
set to the visible flag of each product in the array by using a
setter/getter method.
If I use a public instance variable, such as a global isVisible flag, this
would work like the AjaxExample, but the global instance variable is not
suitable for each row in a repetition.
I do not understand why the binding to a setter/getter method would fail?
Thanks for any hints,
-mai
CurrentProductRepetition: WORepetition {
item = bundleProductItem;
list = currentMainBundleProducts;
index = logIndex;
}
AgreementDetailsAjaxExpansion : AjaxExpansion {
id = ~AgreementDetailsAjaxExpansion + logIndex;
insertion = Effect.blind;
insertionDuration = 0.1;
string = Agreement Details;
expanded = isAgreementDetailsVisibleForBundleProductItem;
}
In the java file, I have the following simple code:
public boolean isAgreementDetailsVisibleForBundleProductItem() {
return (bundleProductItemC.isAgreementDetailsVisible());
}
public void setIsAgreementDetailsVisibleForBundleProductItem(boolean aValue)
{
bundleProductItemC.setIsAgreementDetailsVisible(aValue);
}
==
// Methods used in AjaxExpansion for bundle product
public boolean isAgreementDetailsVisibleC = false;
public boolean isAgreementDetailsVisible() {
return isAgreementDetailsVisibleC;
}
public void setIsAgreementDetailsVisible(boolean value) {
isAgreementDetailsVisibleC = value;
}
However, at runtime, I would get the following exception:
com.webobjects.foundation.NSKeyValueCoding$UnknownKeyException message
'[CustomerSummary name: CustomerSummary subcomponents:
{0.15.13.7.1.5.0.1.3 = er.ajax.AjaxExpansion name: er.ajax.AjaxExpansion
subcomponents: null ; 0.15.13.7.1.7 = er.ajax.AjaxModalDialog name:
er.ajax.AjaxModalDialog subcomponents: null ; } takeValueForKey()]:
attempt to assign value to unknown key:
'isAgreementDetailsVisibleForBundleProductItem'.
This WOComponent does not have an instance variable of the name
isAgreementDetailsVisibleForBundleProductItem or
_isAgreementDetailsVisibleForBundleProductItem, nor a method of the name
setIsAgreementDetailsVisibleForBundleProductItem or
_setIsAgreementDetailsVisibleForBundleProductItem' object 'CustomerSummary
name: CustomerSummary subcomponents: {0.15.13.7.1.5.0.1.3 =
er.ajax.AjaxExpansion name: er.ajax.AjaxExpansion subcomponents: null ;
0.15.13.7.1.7 = er.ajax.AjaxModalDialog name: er.ajax.AjaxModalDialog
subcomponents: null ; } ' key
'isAgreementDetailsVisibleForBundleProductItem'
at
com.webobjects.appserver.WOComponent.handleTakeValueForUnboundKey(WOComponent.java:1781)
at
com.webobjects.foundation.NSKeyValueCoding$Utility.handleTakeValueForUnboundKey(NSKeyValueCoding.java:519)
at
com.webobjects.foundation.NSKeyValueCoding$_KeyBinding.setValueInObject(NSKeyValueCoding.java:899)
at
com.webobjects.foundation.NSKeyValueCoding$DefaultImplementation.takeValueForKey(NSKeyValueCoding.java:1354)
at
com.webobjects.appserver.WOComponent.takeValueForKey(WOComponent.java:1748)
at
com.webobjects.foundation.NSKeyValueCoding$Utility.takeValueForKey(NSKeyValueCoding.java:469)
at
com.webobjects.foundation.NSValidation$DefaultImplementation.validateTakeValueForKeyPath(NSValidation.java:679)
at
com.webobjects.appserver.WOComponent.validateTakeValueForKeyPath(WOComponent.java:1424)
at
com.webobjects.appserver._private.WOKeyValueAssociation.setValue(WOKeyValueAssociation.java:76)
at
ognl.helperfunction.WOHelperFunctionKeyValueAssociation.setValue(WOHelperFunctionKeyValueAssociation.java:21)
at
com.webobjects.appserver.WOComponent.setValueForBinding(WOComponent.java:910)
at er.ajax.AjaxExpansion.setExpanded(AjaxExpansion.java:138)
at er.ajax.AjaxExpansion.toggle(AjaxExpansion.java:146)
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update
need help with weird application failure?
Hello, I wonder if someone can give me a hint about the error messages below? I recently added ERJars.framework and WOOgnl.framework to my application which is not a full WOnder project.The application also uses Ajax and ERExtensions. It still uses the WebObjects JavaWOExtensions, not the Wonder one. This is when I noticed the following weird error messages (see below). Sometimes, the application starts and at other times, it comes to a halt displaying the message application instance was not found on the server. Looking at the error logs, I found the following: MyAppTest-1.20110328030029017:[2011-3-27 22:6:0 CDT] WorkerThread11 WOWorkerThread id=11 socket=Socket[addr=/17.150.252.218,port=41193,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'OPTIONS' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:0 CDT] WorkerThread1 WOWorkerThread id=1 socket=Socket[addr=/17.150.252.218,port=41232,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'GET/index.html' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:0 CDT] WorkerThread2 WOWorkerThread id=2 socket=Socket[addr=/17.150.252.218,port=41261,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'GET/jdkcdkyvz3ezg1z69sg' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:1 CDT] WorkerThread5 WOWorkerThread id=5 socket=Socket[addr=/17.150.252.218,port=41355,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'rndmmtd' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:1 CDT] WorkerThread6 WOWorkerThread id=6 socket=Socket[addr=/17.150.252.218,port=41368,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'rndmmtd' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:7:11 CDT] WorkerThread2 WOWorkerThread id=2 socket=Socket[addr=/17.150.252.218,port=49135,localport=] Exception while creating request: java.lang.IllegalArgumentException: com.webobjects.appserver.WORequest: No URL was provided.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:7:17 CDT] WorkerThread11 WOWorkerThread id=11 socket=Socket[addr=/17.150.252.218,port=50437,localport=] Exception while creating request: java.lang.IllegalArgumentException: com.webobjects.appserver.WORequest: No URL was provided.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:12:40 CDT] WorkerThread5 WOWorkerThread id=5 socket=Socket[addr=/17.150.252.218,port=46796,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'BADMTHD' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:12:40 CDT] WorkerThread6 WOWorkerThread id=6 socket=Socket[addr=/17.150.252.218,port=46816,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'BADMTHD' is not supported.; dropping connection None of these methods are used in the application, Thanks for any suggestions, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: need help with weird application failure?
Thanks Chuck! I think you are right. You are awesome, as always! I have to research somewhere else why it slowed down. mai On Wed, Mar 30, 2011 at 11:22 AM, Chuck Hill ch...@global-village.netwrote: That looks like someone is doing a security probe (or a hack attempt) on your server. 17.150.252.218 is an Apple address, so I guess the former. :-) I don't know if this is related to your app crashing or not. Nothing in the log suggests the app crashed. Chuck On Mar 30, 2011, at 11:15 AM, Mai Nguyen wrote: Hello, I wonder if someone can give me a hint about the error messages below? I recently added ERJars.framework and WOOgnl.framework to my application which is not a full WOnder project.The application also uses Ajax and ERExtensions. It still uses the WebObjects JavaWOExtensions, not the Wonder one. This is when I noticed the following weird error messages (see below). Sometimes, the application starts and at other times, it comes to a halt displaying the message application instance was not found on the server. Looking at the error logs, I found the following: MyAppTest-1.20110328030029017:[2011-3-27 22:6:0 CDT] WorkerThread11 WOWorkerThread id=11 socket=Socket[addr=/17.150.252.218,port=41193,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'OPTIONS' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:0 CDT] WorkerThread1 WOWorkerThread id=1 socket=Socket[addr=/17.150.252.218,port=41232,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'GET/index.html' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:0 CDT] WorkerThread2 WOWorkerThread id=2 socket=Socket[addr=/17.150.252.218,port=41261,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'GET/jdkcdkyvz3ezg1z69sg' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:1 CDT] WorkerThread5 WOWorkerThread id=5 socket=Socket[addr=/17.150.252.218,port=41355,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'rndmmtd' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:6:1 CDT] WorkerThread6 WOWorkerThread id=6 socket=Socket[addr=/17.150.252.218,port=41368,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'rndmmtd' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:7:11 CDT] WorkerThread2 WOWorkerThread id=2 socket=Socket[addr=/17.150.252.218,port=49135,localport=] Exception while creating request: java.lang.IllegalArgumentException: com.webobjects.appserver.WORequest: No URL was provided.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:7:17 CDT] WorkerThread11 WOWorkerThread id=11 socket=Socket[addr=/17.150.252.218,port=50437,localport=] Exception while creating request: java.lang.IllegalArgumentException: com.webobjects.appserver.WORequest: No URL was provided.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:12:40 CDT] WorkerThread5 WOWorkerThread id=5 socket=Socket[addr=/17.150.252.218,port=46796,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'BADMTHD' is not supported.; dropping connection MyAppTest-1.20110328030029017:[2011-3-27 22:12:40 CDT] WorkerThread6 WOWorkerThread id=6 socket=Socket[addr=/17.150.252.218,port=46816,localport=] Exception while creating request: java.lang.IllegalArgumentException: WORequest: Method 'BADMTHD' is not supported.; dropping connection None of these methods are used in the application, Thanks for any suggestions, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/chill%40global-village.net This email sent to ch...@global-village.net -- Chuck Hill Senior Consultant / VP Development Practical WebObjects - for developers who want to increase their overall knowledge of WebObjects or who are trying to solve specific problems. http://www.global-village.net/products/practical_webobjects ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
AjaxExpansion inside a WORepetition?
Hi List, I am new to the Wonder Ajax frameworks, and have some trouble using AjaxExpansion inside a WO Repetition. The Expanded state is global and not specific to a row in a repetition. If I use the example ToggleDetails in AjaxExample2, it works for one single AjaxExpansion area (one row only). However, if I use a WO Repetition of AjaxExpansion areas, the Expanded state is not behaving properly. Only the first cell is expanded, even when I click on the other cells. It seems like the expanded flag is behaving globally for the first table cell only. Is it correct to use AjaxExpansion in a WORepetition to update a row table cell, or should I something else? (an example would be appreciated) Thanks for any hints, -mai ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: AjaxExpansion inside a WORepetition?
Hi Chuck, Are you binding it to something that is unique for every row? The binding expanded is tied to a global boolean variable like the ToggleDetails example. I have not found a good way to set it per row though, so this may be the issue since this boolean is used for all rows. I am only updating the contents of a table cell, not adding or removing table cells. The expanded state shows more information vs. the closed state. thanks, mai On Mar 28, 2011, at 12:54 PM, Chuck Hill wrote: Hi Mai, On Mar 28, 2011, at 12:45 PM, Mai Nguyen wrote: Hi List, I am new to the Wonder Ajax frameworks, and have some trouble using AjaxExpansion inside a WO Repetition. The Expanded state is global and not specific to a row in a repetition. If I use the example ToggleDetails in AjaxExample2, it works for one single AjaxExpansion area (one row only). However, if I use a WO Repetition of AjaxExpansion areas, the Expanded state is not behaving properly. Only the first cell is expanded, even when I click on the other cells. It seems like the expanded flag is behaving globally for the first table cell only. Are you binding it to something that is unique for every row? Is it correct to use AjaxExpansion in a WORepetition to update a row table cell, or should I something else? (an example would be appreciated) Thanks for any hints, Are you just updating the contents of one cell? Adding or removing rows/cells in tables with Ajax does not work well. Chuck -- Chuck Hill Senior Consultant / VP Development Practical WebObjects - for developers who want to increase their overall knowledge of WebObjects or who are trying to solve specific problems. http://www.global-village.net/products/practical_webobjects ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/huemai%40mac.com This email sent to hue...@mac.com ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to arch...@mail-archive.com
Re: AjaxExpansion inside a WORepetition?
Hi Chuck,
You are correct.
You have to be careful of the id too in repetitions, each one needs to be
unique.
This was the problem. After having a unique ID per row, I can flip open one row
at a time. One cannot flip all rows open, but this is probably the way the UI
is intended.
Thanks very much for this useful tip,
-mai
On Mar 28, 2011, at 1:42 PM, Chuck Hill wrote:
On Mar 28, 2011, at 1:18 PM, Mai Nguyen wrote:
Hi Chuck,
Are you binding it to something that is unique for every row?
The binding expanded is tied to a global boolean variable like the
ToggleDetails example.
I have not found a good way to set it per row though, so this may be the
issue since this boolean is used for all rows.
You have to be careful of the id too in repetitions, each one needs to be
unique. That is probably one of the problems. One way is to bind the index
of the repetition to something and then use OGNL in the binding (assuming you
are using WOOGNL in your project):
MyExpansion: AjaxExpansion {
id = ~MyExpansion_ + theIndex;
...
}
I am only updating the contents of a table cell, not adding or removing
table cells.
The expanded state shows more information vs. the closed state.
I _think_ that should be OK.
On Mar 28, 2011, at 12:54 PM, Chuck Hill wrote:
Hi Mai,
On Mar 28, 2011, at 12:45 PM, Mai Nguyen wrote:
Hi List,
I am new to the Wonder Ajax frameworks, and have some trouble using
AjaxExpansion inside a WO Repetition.
The Expanded state is global and not specific to a row in a repetition.
If I use the example ToggleDetails in AjaxExample2, it works for one
single AjaxExpansion area (one row only).
However, if I use a WO Repetition of AjaxExpansion areas, the Expanded
state is not behaving properly. Only the first cell is expanded, even when
I click on the other cells. It seems like the expanded flag is behaving
globally for the first table cell only.
Are you binding it to something that is unique for every row?
Is it correct to use AjaxExpansion in a WORepetition to update a row table
cell, or should I something else? (an example would be appreciated)
Thanks for any hints,
Are you just updating the contents of one cell? Adding or removing
rows/cells in tables with Ajax does not work well.
Chuck
--
Chuck Hill Senior Consultant / VP Development
Practical WebObjects - for developers who want to increase their overall
knowledge of WebObjects or who are trying to solve specific problems.
http://www.global-village.net/products/practical_webobjects
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/huemai%40mac.com
This email sent to hue...@mac.com
--
Chuck Hill Senior Consultant / VP Development
Practical WebObjects - for developers who want to increase their overall
knowledge of WebObjects or who are trying to solve specific problems.
http://www.global-village.net/products/practical_webobjects
___
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (Webobjects-dev@lists.apple.com)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com
This email sent to arch...@mail-archive.com
Re: Web Services example projects
Hello Cara: The /Developer/Documentation/WebObjects directory no longer exists starting with the integration of Xcode/WebObjects (i.e. starting from WO5.3) If you still have an older WO version such as WO5.2.3, you will find the examples in /Developer/Documentation/WebObjects/Web_Services/ projects. These projects were never updated to Xcode. They still use Project Builder. best On Nov 23, 2005, at 7:45 AM, Cara MacNish wrote: Sorry to ask a dumb question, but I'm really finding the webobjects documentation inadequate. In particular, Developing Web Services Applications relies on examples such as projects/Calculator. At the start of the Web Services Programming Guide it states: This document studies example application projects to explain some of the concepts it addresses. This projects and other companion resources can be found in /Developer/Documentation/WebObjects/ Web_Services/projects. Alternatively, you can download them from http://developer.apple.com/documentation/WebObjects/. My /Developer/Documentation doesn't contain a WebObjects directory. I've installed the latest XCode 2.2 with the latest WebObjects, and reinstalled the WebObjects, Examples and Documentation packages separately to be sure. I've also installed the November developer documentation. No luck. I've also thoroughly searched http://developer.apple.com/ documentation/WebObjects/ and cannot find the projects. And finally I've googled everything I can think of and can find no sign of them. Can anyone point me to where the said projects can actually be found? Thanks Cara ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/mnguyen% 40apple.com This email sent to [EMAIL PROTECTED] ___ Do not post admin requests to the list. They will be ignored. Webobjects-dev mailing list (Webobjects-dev@lists.apple.com) Help/Unsubscribe/Update your Subscription: http://lists.apple.com/mailman/options/webobjects-dev/archive%40mail-archive.com This email sent to archive@mail-archive.com
