[Lift] Re: Don't shoot the non-XML messenger ...

2009-10-13 Thread Bill Venners

Hi David,

On Tue, Oct 13, 2009 at 4:37 PM, David Pollak
feeder.of.the.be...@gmail.com wrote:
 Why does Lift use XHTML rather than Strings or something else for
 templating?  Because XML is a secure (and fast) representation.  While PHP
 sites have significant cross site scripting problems, Lift apps have none
 (and I've been through half a dozen penetration test with Lift apps and the
 universal evaluation is this is the most secure web site we've ever
 tested.)

Can you elaborate on how XHTML eliminates the XSS potential of
strings? Doesn't an XHTML file have strings in it in between the
markup?

Bill

Bill Venners
Artima, Inc.
http://www.artima.com

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
Lift group.
To post to this group, send email to liftweb@googlegroups.com
To unsubscribe from this group, send email to 
liftweb+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/liftweb?hl=en
-~--~~~~--~~--~--~---



[Lift] Re: Don't shoot the non-XML messenger ...

2009-10-13 Thread Bryan

Hi Aule,

 I am still looking to see if I over-looked somewhere on the web where
 there is a 1.0.2 Boot.scala

   1) showing unambiguously how to flip the default Content-Type
   2) and having, in fact, the intended effect

  as I now know from a few trials over a few hours that this is not as
 simple as some web posts present.

I have not had a need for this, so I had to search some web posts to
find the answer.  Quckly, I found the following snippet:

LiftRules.determineContentType = {
  case _ = text/curl
}

I have not verified this, so please let us know if it does not help.

 Were it trivial, I had not mocked a framework, and you, Mr. Pollock,
 had not raged.

From my readings, Mr. Pollak has yet to show any rage.

--Bryan

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
Lift group.
To post to this group, send email to liftweb@googlegroups.com
To unsubscribe from this group, send email to 
liftweb+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/liftweb?hl=en
-~--~~~~--~~--~--~---



[Lift] Re: Don't shoot the non-XML messenger ...

2009-10-13 Thread TylerWeir

I feel we should all just step away from this discussion, it's not
getting us anywhere.

Tyler

On Oct 13, 9:24 pm, Aule grshipl...@gmail.com wrote:
 Bryan

 Been there, tried that.
 Oh - the mime type is text/vnd.curl

 Btw, actually a threat has been conveyed to me at mail.google.com and
 I have protested to Google

 I can't imagine Dave Hansen or MArtin Odersky or Bill Venners or Lex
 Spoon sending me a threat, but so it goes ...

 At least I will not get 4 years in an Egyptian prison for insulting
 Randy's Alma Mater (Madison).

 Oh Randy.  I read my Paul Valéry in the original.  www.hsinfosystems.com
 is missing the accent on his surname.

 Lift is not Scala; I will continue to recommend Scala.

 For me, the jury on Lift is not yet in.  When some sycophants of
 Seaside got, nasty, I did not walk away from Seaside, warts and all.

 R

 On Oct 13, 8:10 pm, Bryan germ...@gmail.com wrote:



  Hi Aule,

   I am still looking to see if I over-looked somewhere on the web where
   there is a 1.0.2 Boot.scala

     1) showing unambiguously how to flip the default Content-Type
     2) and having, in fact, the intended effect

    as I now know from a few trials over a few hours that this is not as
   simple as some web posts present.

  I have not had a need for this, so I had to search some web posts to
  find the answer.  Quckly, I found the following snippet:

  LiftRules.determineContentType = {
    case _ = text/curl

  }

  I have not verified this, so please let us know if it does not help.

   Were it trivial, I had not mocked a framework, and you, Mr. Pollock,
   had not raged.

  From my readings, Mr. Pollak has yet to show any rage.

  --Bryan
--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
Lift group.
To post to this group, send email to liftweb@googlegroups.com
To unsubscribe from this group, send email to 
liftweb+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/liftweb?hl=en
-~--~~~~--~~--~--~---



[Lift] Re: Don't shoot the non-XML messenger ...

2009-10-13 Thread Naftoli Gugenheim

Can you please stop making it sound like you expect to speak rudely about Lift 
and get polite responses? Or are you completely unaware of how you sound?

-
Aulegrshipl...@gmail.com wrote:


Bryan

Been there, tried that.
Oh - the mime type is text/vnd.curl

Btw, actually a threat has been conveyed to me at mail.google.com and
I have protested to Google

I can't imagine Dave Hansen or MArtin Odersky or Bill Venners or Lex
Spoon sending me a threat, but so it goes ...

At least I will not get 4 years in an Egyptian prison for insulting
Randy's Alma Mater (Madison).

Oh Randy.  I read my Paul Valéry in the original.  www.hsinfosystems.com
is missing the accent on his surname.

Lift is not Scala; I will continue to recommend Scala.

For me, the jury on Lift is not yet in.  When some sycophants of
Seaside got, nasty, I did not walk away from Seaside, warts and all.

R

On Oct 13, 8:10 pm, Bryan germ...@gmail.com wrote:
 Hi Aule,

  I am still looking to see if I over-looked somewhere on the web where
  there is a 1.0.2 Boot.scala

    1) showing unambiguously how to flip the default Content-Type
    2) and having, in fact, the intended effect

   as I now know from a few trials over a few hours that this is not as
  simple as some web posts present.

 I have not had a need for this, so I had to search some web posts to
 find the answer.  Quckly, I found the following snippet:

 LiftRules.determineContentType = {
   case _ = text/curl

 }

 I have not verified this, so please let us know if it does not help.

  Were it trivial, I had not mocked a framework, and you, Mr. Pollock,
  had not raged.

 From my readings, Mr. Pollak has yet to show any rage.

 --Bryan



--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
Lift group.
To post to this group, send email to liftweb@googlegroups.com
To unsubscribe from this group, send email to 
liftweb+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/liftweb?hl=en
-~--~~~~--~~--~--~---



[Lift] Re: Don't shoot the non-XML messenger ...

2009-10-13 Thread David Pollak
You are banned from this group.

On Tue, Oct 13, 2009 at 6:24 PM, Aule grshipl...@gmail.com wrote:


 Bryan

 Been there, tried that.
 Oh - the mime type is text/vnd.curl

 Btw, actually a threat has been conveyed to me at mail.google.com and
 I have protested to Google

 I can't imagine Dave Hansen or MArtin Odersky or Bill Venners or Lex
 Spoon sending me a threat, but so it goes ...

 At least I will not get 4 years in an Egyptian prison for insulting
 Randy's Alma Mater (Madison).

 Oh Randy.  I read my Paul Valéry in the original.  www.hsinfosystems.com
 is missing the accent on his surname.

 Lift is not Scala; I will continue to recommend Scala.

 For me, the jury on Lift is not yet in.  When some sycophants of
 Seaside got, nasty, I did not walk away from Seaside, warts and all.

 R

 On Oct 13, 8:10 pm, Bryan germ...@gmail.com wrote:
  Hi Aule,
 
   I am still looking to see if I over-looked somewhere on the web where
   there is a 1.0.2 Boot.scala
 
 1) showing unambiguously how to flip the default Content-Type
 2) and having, in fact, the intended effect
 
as I now know from a few trials over a few hours that this is not as
   simple as some web posts present.
 
  I have not had a need for this, so I had to search some web posts to
  find the answer.  Quckly, I found the following snippet:
 
  LiftRules.determineContentType = {
case _ = text/curl
 
  }
 
  I have not verified this, so please let us know if it does not help.
 
   Were it trivial, I had not mocked a framework, and you, Mr. Pollock,
   had not raged.
 
  From my readings, Mr. Pollak has yet to show any rage.
 
  --Bryan

 



-- 
Lift, the simply functional web framework http://liftweb.net
Beginning Scala http://www.apress.com/book/view/1430219890
Follow me: http://twitter.com/dpp
Surf the harmonics

--~--~-~--~~~---~--~~
You received this message because you are subscribed to the Google Groups 
Lift group.
To post to this group, send email to liftweb@googlegroups.com
To unsubscribe from this group, send email to 
liftweb+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/liftweb?hl=en
-~--~~~~--~~--~--~---