[Lift] Re: Don't shoot the non-XML messenger ...
Hi David, On Tue, Oct 13, 2009 at 4:37 PM, David Pollak feeder.of.the.be...@gmail.com wrote: Why does Lift use XHTML rather than Strings or something else for templating? Because XML is a secure (and fast) representation. While PHP sites have significant cross site scripting problems, Lift apps have none (and I've been through half a dozen penetration test with Lift apps and the universal evaluation is this is the most secure web site we've ever tested.) Can you elaborate on how XHTML eliminates the XSS potential of strings? Doesn't an XHTML file have strings in it in between the markup? Bill Bill Venners Artima, Inc. http://www.artima.com --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Lift group. To post to this group, send email to liftweb@googlegroups.com To unsubscribe from this group, send email to liftweb+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/liftweb?hl=en -~--~~~~--~~--~--~---
[Lift] Re: Don't shoot the non-XML messenger ...
Hi Aule, I am still looking to see if I over-looked somewhere on the web where there is a 1.0.2 Boot.scala 1) showing unambiguously how to flip the default Content-Type 2) and having, in fact, the intended effect as I now know from a few trials over a few hours that this is not as simple as some web posts present. I have not had a need for this, so I had to search some web posts to find the answer. Quckly, I found the following snippet: LiftRules.determineContentType = { case _ = text/curl } I have not verified this, so please let us know if it does not help. Were it trivial, I had not mocked a framework, and you, Mr. Pollock, had not raged. From my readings, Mr. Pollak has yet to show any rage. --Bryan --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Lift group. To post to this group, send email to liftweb@googlegroups.com To unsubscribe from this group, send email to liftweb+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/liftweb?hl=en -~--~~~~--~~--~--~---
[Lift] Re: Don't shoot the non-XML messenger ...
I feel we should all just step away from this discussion, it's not getting us anywhere. Tyler On Oct 13, 9:24 pm, Aule grshipl...@gmail.com wrote: Bryan Been there, tried that. Oh - the mime type is text/vnd.curl Btw, actually a threat has been conveyed to me at mail.google.com and I have protested to Google I can't imagine Dave Hansen or MArtin Odersky or Bill Venners or Lex Spoon sending me a threat, but so it goes ... At least I will not get 4 years in an Egyptian prison for insulting Randy's Alma Mater (Madison). Oh Randy. I read my Paul Valéry in the original. www.hsinfosystems.com is missing the accent on his surname. Lift is not Scala; I will continue to recommend Scala. For me, the jury on Lift is not yet in. When some sycophants of Seaside got, nasty, I did not walk away from Seaside, warts and all. R On Oct 13, 8:10 pm, Bryan germ...@gmail.com wrote: Hi Aule, I am still looking to see if I over-looked somewhere on the web where there is a 1.0.2 Boot.scala 1) showing unambiguously how to flip the default Content-Type 2) and having, in fact, the intended effect as I now know from a few trials over a few hours that this is not as simple as some web posts present. I have not had a need for this, so I had to search some web posts to find the answer. Quckly, I found the following snippet: LiftRules.determineContentType = { case _ = text/curl } I have not verified this, so please let us know if it does not help. Were it trivial, I had not mocked a framework, and you, Mr. Pollock, had not raged. From my readings, Mr. Pollak has yet to show any rage. --Bryan --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Lift group. To post to this group, send email to liftweb@googlegroups.com To unsubscribe from this group, send email to liftweb+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/liftweb?hl=en -~--~~~~--~~--~--~---
[Lift] Re: Don't shoot the non-XML messenger ...
Can you please stop making it sound like you expect to speak rudely about Lift and get polite responses? Or are you completely unaware of how you sound? - Aulegrshipl...@gmail.com wrote: Bryan Been there, tried that. Oh - the mime type is text/vnd.curl Btw, actually a threat has been conveyed to me at mail.google.com and I have protested to Google I can't imagine Dave Hansen or MArtin Odersky or Bill Venners or Lex Spoon sending me a threat, but so it goes ... At least I will not get 4 years in an Egyptian prison for insulting Randy's Alma Mater (Madison). Oh Randy. I read my Paul Valéry in the original. www.hsinfosystems.com is missing the accent on his surname. Lift is not Scala; I will continue to recommend Scala. For me, the jury on Lift is not yet in. When some sycophants of Seaside got, nasty, I did not walk away from Seaside, warts and all. R On Oct 13, 8:10 pm, Bryan germ...@gmail.com wrote: Hi Aule, I am still looking to see if I over-looked somewhere on the web where there is a 1.0.2 Boot.scala 1) showing unambiguously how to flip the default Content-Type 2) and having, in fact, the intended effect as I now know from a few trials over a few hours that this is not as simple as some web posts present. I have not had a need for this, so I had to search some web posts to find the answer. Quckly, I found the following snippet: LiftRules.determineContentType = { case _ = text/curl } I have not verified this, so please let us know if it does not help. Were it trivial, I had not mocked a framework, and you, Mr. Pollock, had not raged. From my readings, Mr. Pollak has yet to show any rage. --Bryan --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Lift group. To post to this group, send email to liftweb@googlegroups.com To unsubscribe from this group, send email to liftweb+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/liftweb?hl=en -~--~~~~--~~--~--~---
[Lift] Re: Don't shoot the non-XML messenger ...
You are banned from this group. On Tue, Oct 13, 2009 at 6:24 PM, Aule grshipl...@gmail.com wrote: Bryan Been there, tried that. Oh - the mime type is text/vnd.curl Btw, actually a threat has been conveyed to me at mail.google.com and I have protested to Google I can't imagine Dave Hansen or MArtin Odersky or Bill Venners or Lex Spoon sending me a threat, but so it goes ... At least I will not get 4 years in an Egyptian prison for insulting Randy's Alma Mater (Madison). Oh Randy. I read my Paul Valéry in the original. www.hsinfosystems.com is missing the accent on his surname. Lift is not Scala; I will continue to recommend Scala. For me, the jury on Lift is not yet in. When some sycophants of Seaside got, nasty, I did not walk away from Seaside, warts and all. R On Oct 13, 8:10 pm, Bryan germ...@gmail.com wrote: Hi Aule, I am still looking to see if I over-looked somewhere on the web where there is a 1.0.2 Boot.scala 1) showing unambiguously how to flip the default Content-Type 2) and having, in fact, the intended effect as I now know from a few trials over a few hours that this is not as simple as some web posts present. I have not had a need for this, so I had to search some web posts to find the answer. Quckly, I found the following snippet: LiftRules.determineContentType = { case _ = text/curl } I have not verified this, so please let us know if it does not help. Were it trivial, I had not mocked a framework, and you, Mr. Pollock, had not raged. From my readings, Mr. Pollak has yet to show any rage. --Bryan -- Lift, the simply functional web framework http://liftweb.net Beginning Scala http://www.apress.com/book/view/1430219890 Follow me: http://twitter.com/dpp Surf the harmonics --~--~-~--~~~---~--~~ You received this message because you are subscribed to the Google Groups Lift group. To post to this group, send email to liftweb@googlegroups.com To unsubscribe from this group, send email to liftweb+unsubscr...@googlegroups.com For more options, visit this group at http://groups.google.com/group/liftweb?hl=en -~--~~~~--~~--~--~---