Re: [Catalyst] JSONP support Catalyst::Controller::DBIC::API

2017-03-17 Thread Rajesh Kumar Mallah

Thanks for clarifying .
I shall try to see and explore.


regds
mallah.

> If someone wants JSONP support, yes.
>
> Best regards, Alex
>
>
> On 2017-03-16 18:07, Rajesh Kumar Mallah wrote:
>>
>>
>>
>> Ok are you suggesting DBIC::API needs to be enhanced for
>> JSONP support ?
>>
>>
>> Regds
>> Mallah.
>>




___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/


Re: [Catalyst] JSONP support Catalyst::Controller::DBIC::API

2017-03-17 Thread Hartmaier Alexander

If someone wants JSONP support, yes.

Best regards, Alex


On 2017-03-16 18:07, Rajesh Kumar Mallah wrote:




Ok are you suggesting DBIC::API needs to be enhanced for
JSONP support ?


Regds
Mallah.


Looks like a code injection attack vector to me...

Patch + Tests for DBIC::API welcome!


On 2017-03-09 11:05, Rajesh Kumar Mallah wrote:



For the time being i have modified and solved my issue as below:

sub end : Private {
   my ( $self, $c ) = @_;

   ##
   # code for manipulating stash here
   ##

   $c->forward('serialize');

   my $cb = $c->request->params->{callback} ;

   if ($cb) {
   my $body = \$c->res->body;
   $$body = "$cb ($$body);";
   $c->res->body($$body);
   }

}


regds
mallah.



Hi ,

How to get JSON response body wrapped in a callback function
call (a.k.a JSONP) when using Catalyst::Controller::DBIC::API::REST

I use Catalyst::Controller::DBIC::API and 'end' function
in ControllerBase is like below:

sub end : Private {
  my ( $self, $c ) = @_;

  ##
   # code for manipulating stash here
  ##

  $c->forward('serialize');
}

=
In   Catalyst/Controller/DBIC/API.pm

# from Catalyst::Action::Serialize
sub serialize : ActionClass('Serialize') { }

=


My other JSON responses which are rendered via MyApp::View::JSON
can be modified as JSONP compatible as i have below in my App config

__PACKAGE__->config({
'View::JSON' => {
allow_callback  => 1,# defaults to 0
},
});


===


The problem is only with automatically generated rest endpoints
from  Catalyst::Controller::DBIC::API.

Thanks in anticipation.


Regds
mallah.





















___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive:
http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/





  *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*

T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien
Handelsgericht Wien, FN 79340b


  *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*

Notice: This e-mail contains information that is confidential and may be
privileged.
If you are not the intended recipient, please notify the sender and then
delete this e-mail immediately.


  *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*

___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive:
http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/






___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/



___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/


Re: [Catalyst] JSONP support Catalyst::Controller::DBIC::API

2017-03-16 Thread Rajesh Kumar Mallah




Ok are you suggesting DBIC::API needs to be enhanced for
JSONP support ?


Regds
Mallah.

> Looks like a code injection attack vector to me...
>
> Patch + Tests for DBIC::API welcome!
>
>
> On 2017-03-09 11:05, Rajesh Kumar Mallah wrote:
>>
>>
>>
>> For the time being i have modified and solved my issue as below:
>>
>> sub end : Private {
>>   my ( $self, $c ) = @_;
>>
>>   ##
>>   # code for manipulating stash here
>>   ##
>>
>>   $c->forward('serialize');
>>
>>   my $cb = $c->request->params->{callback} ;
>>
>>   if ($cb) {
>>   my $body = \$c->res->body;
>>   $$body = "$cb ($$body);";
>>   $c->res->body($$body);
>>   }
>>
>> }
>>
>>
>> regds
>> mallah.
>>
>>
>>> Hi ,
>>>
>>> How to get JSON response body wrapped in a callback function
>>> call (a.k.a JSONP) when using Catalyst::Controller::DBIC::API::REST
>>>
>>> I use Catalyst::Controller::DBIC::API and 'end' function
>>> in ControllerBase is like below:
>>>
>>> sub end : Private {
>>>  my ( $self, $c ) = @_;
>>>
>>>  ##
>>>   # code for manipulating stash here
>>>  ##
>>>
>>>  $c->forward('serialize');
>>> }
>>>
>>> =
>>> In   Catalyst/Controller/DBIC/API.pm
>>>
>>> # from Catalyst::Action::Serialize
>>> sub serialize : ActionClass('Serialize') { }
>>>
>>> =
>>>
>>>
>>> My other JSON responses which are rendered via MyApp::View::JSON
>>> can be modified as JSONP compatible as i have below in my App config
>>>
>>> __PACKAGE__->config({
>>>'View::JSON' => {
>>>allow_callback  => 1,# defaults to 0
>>>},
>>> });
>>>
>>>
>>> ===
>>>
>>>
>>> The problem is only with automatically generated rest endpoints
>>> from  Catalyst::Controller::DBIC::API.
>>>
>>> Thanks in anticipation.
>>>
>>>
>>> Regds
>>> mallah.
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>>
>>
>> ___
>> List: Catalyst@lists.scsys.co.uk
>> Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
>> Searchable archive:
>> http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
>> Dev site: http://dev.catalyst.perl.org/
>
>
>
>
 *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
> T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien
> Handelsgericht Wien, FN 79340b
>
 *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
> Notice: This e-mail contains information that is confidential and may be
> privileged.
> If you are not the intended recipient, please notify the sender and then
> delete this e-mail immediately.
>
 *"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
>
> ___
> List: Catalyst@lists.scsys.co.uk
> Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
> Searchable archive:
> http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
> Dev site: http://dev.catalyst.perl.org/
>





___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/


Re: [Catalyst] JSONP support Catalyst::Controller::DBIC::API

2017-03-14 Thread Hartmaier Alexander

Looks like a code injection attack vector to me...

Patch + Tests for DBIC::API welcome!


On 2017-03-09 11:05, Rajesh Kumar Mallah wrote:




For the time being i have modified and solved my issue as below:

sub end : Private {
  my ( $self, $c ) = @_;

  ##
  # code for manipulating stash here
  ##

  $c->forward('serialize');

  my $cb = $c->request->params->{callback} ;

  if ($cb) {
  my $body = \$c->res->body;
  $$body = "$cb ($$body);";
  $c->res->body($$body);
  }

}


regds
mallah.



Hi ,

How to get JSON response body wrapped in a callback function
call (a.k.a JSONP) when using Catalyst::Controller::DBIC::API::REST

I use Catalyst::Controller::DBIC::API and 'end' function
in ControllerBase is like below:

sub end : Private {
 my ( $self, $c ) = @_;

 ##
  # code for manipulating stash here
 ##

 $c->forward('serialize');
}

=
In   Catalyst/Controller/DBIC/API.pm

# from Catalyst::Action::Serialize
sub serialize : ActionClass('Serialize') { }

=


My other JSON responses which are rendered via MyApp::View::JSON
can be modified as JSONP compatible as i have below in my App config

__PACKAGE__->config({
   'View::JSON' => {
   allow_callback  => 1,# defaults to 0
   },
});


===


The problem is only with automatically generated rest endpoints
from  Catalyst::Controller::DBIC::API.

Thanks in anticipation.


Regds
mallah.






















___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/




*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
T-Systems Austria GesmbH Rennweg 97-99, 1030 Wien
Handelsgericht Wien, FN 79340b
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*
Notice: This e-mail contains information that is confidential and may be 
privileged.
If you are not the intended recipient, please notify the sender and then
delete this e-mail immediately.
*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*"*

___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/


Re: [Catalyst] JSONP support Catalyst::Controller::DBIC::API

2017-03-09 Thread Rajesh Kumar Mallah




For the time being i have modified and solved my issue as below:

sub end : Private {
 my ( $self, $c ) = @_;

 ##
 # code for manipulating stash here
 ##

 $c->forward('serialize');

 my $cb = $c->request->params->{callback} ;

 if ($cb) {
my $body = \$c->res->body;
$$body = "$cb ($$body);";
$c->res->body($$body);
 }

}


regds
mallah.


> Hi ,
>
> How to get JSON response body wrapped in a callback function
> call (a.k.a JSONP) when using Catalyst::Controller::DBIC::API::REST
>
> I use Catalyst::Controller::DBIC::API and 'end' function
> in ControllerBase is like below:
>
> sub end : Private {
> my ( $self, $c ) = @_;
>
> ##
>  # code for manipulating stash here
> ##
>
> $c->forward('serialize');
> }
>
> =
> In   Catalyst/Controller/DBIC/API.pm
>
> # from Catalyst::Action::Serialize
> sub serialize : ActionClass('Serialize') { }
>
> =
>
>
> My other JSON responses which are rendered via MyApp::View::JSON
> can be modified as JSONP compatible as i have below in my App config
>
> __PACKAGE__->config({
>   'View::JSON' => {
>   allow_callback  => 1,# defaults to 0
>   },
> });
>
>
> ===
>
>
> The problem is only with automatically generated rest endpoints
> from  Catalyst::Controller::DBIC::API.
>
> Thanks in anticipation.
>
>
> Regds
> mallah.
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>





___
List: Catalyst@lists.scsys.co.uk
Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst
Searchable archive: http://www.mail-archive.com/catalyst@lists.scsys.co.uk/
Dev site: http://dev.catalyst.perl.org/