Deprecation of VerticalSplitPanel/HorizontalSplitPanel

2014-01-28 Thread mickael . leduque . serli
Hello, The *SplitPanel classes are deprecated. When deprecating a class, one generally provides a replacement, but I can't seem to find one. What should I use to provide the same behaviour ? Note : SplitLayoutPanel is not a replacement. It has the layout panel system limitations and can only

Dialogbox.center and resize synchronization problem

2014-01-28 Thread Magnus
Hi, I have a Dialogbox with a CellTable. The constructor creates the table which causes an onRangeChange event, which in turn causes a RPC call to fetch a list of table entries. When this call returns the table is filled and thus, the size of the dialog box increases. However, the center

Re: Dialogbox.center and resize synchronization problem

2014-01-28 Thread Jim Douglas
You might want to play with setPopupPositionAndShow(); there's an example at the top of this page: http://www.gwtproject.org/javadoc/latest/com/google/gwt/user/client/ui/PopupPanel.html Just as an example (YMMV), I use this in some of my DialogBox objects: public void center(boolean

My own Java package (Mi propio paquete Java)

2014-01-28 Thread Juan Carlos Aranda
Good morning, greetings to the forum. I'm developing a system and I have a development team. There are some classes that do not want to know the source code for security. I need something like create a package containing all these classes to be used in the Client part of a GWT project. I have

Re: My own Java package (Mi propio paquete Java)

2014-01-28 Thread Jens
You need to create GWT modules (*.gwt.xml files) that make the source code of your desired classes available to the GWT compiler using the source path=.../ tag. If you don't have any source code you can not use these classes in GWT client side code. The GWT compiler requires source code. -- J.

Re: My own Java package (Mi propio paquete Java)

2014-01-28 Thread Juan Pablo Gardella
Hola Juan, Los fuentes al ser traducidos (pero ofuscados) a javascript no podes evitar que queden disponibles. La única forma que no develar los fuentes es ejecutar la parte comprometida en el servidor y no en el cliente. Saludos 2014-01-28 Juan Carlos Aranda aranda...@gmail.com Good

Switch on String shouldn't this work in GWT 2.6 / Java 7 ?

2014-01-28 Thread darkflame
Something like ; switch (book) { case Harry Potter: break; case Hitch Hikers Guide To The Galaxy: break; Should now work with the latest GWT from here; https://code.google.com/p/google-web-toolkit/downloads/list Correct? Because I am still getting a[ERROR] Line 1971: Cannot switch on a

Re: Switch on String shouldn't this work in GWT 2.6 / Java 7 ?

2014-01-28 Thread Jens
Have I somehow setup GWT 2.6 wrongly? Using switch() with strings works in GWT 2.6. I guess you have to double check your setup. Maybe you have used an old run configuration that is not up-to-date? -- J. -- You received this message because you are subscribed to the Google Groups

Re: Switch on String shouldn't this work in GWT 2.6 / Java 7 ?

2014-01-28 Thread Thomas Wrobel
Ah, Bingo...it was either down to not clearing the cache's, or the fact a non-GWT 2.6 project was being inherited in. Fixing both of those and it works. *goes of to enjoy Java7* ~~~ Thomas Bertines online review show: http://randomreviewshow.com/index.html Try it! You might even feel ambivalent

Re: My own Java package (Mi propio paquete Java)

2014-01-28 Thread Juan Carlos Aranda
Gracias Juan Pablo y Jens Yo me refiero a la parte Client de la estructura del proyecto. (Client, Shared, Server) Te explico mi necesidad, he creado algunas clases en las cuales he abstraido funcionalidad genérica y avanzada. La idea es crear un paquete o archivo .jar que contenga dicha librería

Re: My own Java package (Mi propio paquete Java)

2014-01-28 Thread Juan Pablo Gardella
Si lo usas en el lado client, si o si debes proveer los fuentes de esas clases para que GWT las convierta en js. Saludos El 28 de enero de 2014, 17:23, Juan Carlos Aranda aranda...@gmail.comescribió: Gracias Juan Pablo y Jens Yo me refiero a la parte Client de la estructura del proyecto.

Re: Dialogbox.center and resize synchronization problem

2014-01-28 Thread Magnus
Hi Jim, when do you call your method and what's the meaning of p_touch? When will offset[Width|Height] be up to date, e. g. after filling a CellTable? Thanks Magnus -- You received this message because you are subscribed to the Google Groups Google Web Toolkit group. To unsubscribe from

[gwt-contrib] Re: Quarterly Hangouts On Air

2014-01-28 Thread James Nelson
A reddit-style AMA would be really cool; so long as we give enough warning and promo, (like posting the event in the G+ community a month ahead of time) I'm sure it would be a hit. The questions in the moderator would probably all get asked; though seeing some of them come up in the gwt-team

Re: [gwt-contrib] Re: Quarterly Hangouts On Air

2014-01-28 Thread Colin Alworth
The concern I've heard expressed during in-person discussions about how to do this is that a written document of answers 'feels' more real and concrete than a group of people answer questions live, since they clearly have no chance to vet their answers from their own organization or with each

[gwt-contrib] Re: XSS in GWT

2014-01-28 Thread Thomas Broyer
On Tuesday, January 28, 2014 5:04:08 PM UTC+1, Kurt Dmello wrote: Hey folks, I am a relative noob to GWT and have been looking at it from a security code review perspective. I want to create a set of guidelines for people who have to review GWT code from a security perspective looking

[gwt-contrib] XSS in GWT

2014-01-28 Thread Kurt Dmello
Hey folks, I am a relative noob to GWT and have been looking at it from a security code review perspective. I want to create a set of guidelines for people who have to review GWT code from a security perspective looking for vulnerabilities. I have read and understood :

[gwt-contrib] Re: XSS in GWT

2014-01-28 Thread Colin Alworth
Another set of dangerous code to look for would be any SafeHtmlUtils or SafeHtmlBuilder (and their uri/style conterparts) call that should take 'constant' or 'trusted' but instead takes untrusted user data. Custom implementions of SafeHtml should also be treated as suspect. These all fall

[gwt-contrib] Re: XSS in GWT

2014-01-28 Thread Kurt Dmello
Thanks Thomas, That was helpful. I tried the img tag and it did work. What you're seeing here is browser sanitization from innerHTML (not sanitization actually, just that the script are not run). Try with img onerror=alert(1) src=// or similar (onclick, etc.) What should someone

Re: [gwt-contrib] Re: XSS in GWT

2014-01-28 Thread Ray Cromwell
Maybe Matthew Dempsky can comment, but I believe there's an error-prone plugin that handles checking for XSS in GWT and bad use of SafeHtml/setHTML. On Tue, Jan 28, 2014 at 12:05 PM, Kurt Dmello kdme...@gmail.com wrote: Thanks Thomas, That was helpful. I tried the img tag and it did work.

[gwt-contrib] Re: XSS in GWT

2014-01-28 Thread Kurt Dmello
Thanks folks, This is great stuff. Keep it coming ! I am looking for all potential points of interest in a code review. Including XSRF and JSON related vulnerabilities. -- http://groups.google.com/group/Google-Web-Toolkit-Contributors --- You received this message because you are subscribed

[gwt-contrib] Re: Next Contributor Hangout

2014-01-28 Thread Bhaskar Janakiraman
Hi Folks, Sorry about this, but I'm going to have to move this hangout by a week, to Wednesday Feb 5th, same time - 10.45 to 11.30am. We have another internal (Google) meeting that requires me and other GWT team members to be present. The meeting will still be recorded and available as usual.