Re: Preventing Copy Pasting URL's In Same Browser Session
Added this field and notice that it writes additional params to the url for pagemap. Preliminary testing indicated that the page map url parameter doesn't have to exist. Are there any concerns with using this option? Douglas On Oct 1, 2009, at 7:14 PM, Douglas Ferguson wrote: What are the implications of turning this one? D/ On Sep 30, 2009, at 1:23 AM, Igor Vaynberg wrote: the javadoc in the later versions mentions that it is enabled by default, however if you are using the default secondlevel caching page store it will be disabled... -igor On Tue, Sep 29, 2009 at 11:10 PM, Carlo Camerino carlo.camer...@gmail.com wrote: hi, actually i'm able to make it work some how using this setting getPageSettings().setAutomaticMultiWindowSupport(true); it creates a new page map everytime i open a page in a new tab or new window. however in the wicket documentation it says that it is enabled by default. but upon checking it seems that it is not enabled by default that's why i'm confused. any recommendations regarding this? i can now check the page map name for each page and throw a redirect if a new page map is encountered other than the default. carlo On Wed, Sep 30, 2009 at 5:50 AM, Phil Housley undeconstruc...@gmail.com wrote: 2009/9/29 Carlo Camerino carlo.camer...@gmail.com: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. I've been playing with the ideas from http://day-to-day-stuff.blogspot.com/2008/10/wicket-extreme-consistent-urls.html for something of my own, which might fit the bill in a way. Following that you can convince wicket to serve up every instance of a mounted page from exactly the same URL. That means if you copy the url, you get a brand new instance of the page. You lose the ability to refresh, but if you are being strict on that sort of thing, I guess you will have a refresh button on the page when and only when it is appropriate. -- Phil Housley - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
Are there no pros and cons of using this? On Oct 2, 2009, at 11:39 AM, Douglas Ferguson wrote: Added this field and notice that it writes additional params to the url for pagemap. Preliminary testing indicated that the page map url parameter doesn't have to exist. Are there any concerns with using this option? Douglas On Oct 1, 2009, at 7:14 PM, Douglas Ferguson wrote: What are the implications of turning this one? D/ On Sep 30, 2009, at 1:23 AM, Igor Vaynberg wrote: the javadoc in the later versions mentions that it is enabled by default, however if you are using the default secondlevel caching page store it will be disabled... -igor On Tue, Sep 29, 2009 at 11:10 PM, Carlo Camerino carlo.camer...@gmail.com wrote: hi, actually i'm able to make it work some how using this setting getPageSettings().setAutomaticMultiWindowSupport(true); it creates a new page map everytime i open a page in a new tab or new window. however in the wicket documentation it says that it is enabled by default. but upon checking it seems that it is not enabled by default that's why i'm confused. any recommendations regarding this? i can now check the page map name for each page and throw a redirect if a new page map is encountered other than the default. carlo On Wed, Sep 30, 2009 at 5:50 AM, Phil Housley undeconstruc...@gmail.com wrote: 2009/9/29 Carlo Camerino carlo.camer...@gmail.com: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. I've been playing with the ideas from http://day-to-day-stuff.blogspot.com/2008/10/wicket-extreme-consistent-urls.html for something of my own, which might fit the bill in a way. Following that you can convince wicket to serve up every instance of a mounted page from exactly the same URL. That means if you copy the url, you get a brand new instance of the page. You lose the ability to refresh, but if you are being strict on that sort of thing, I guess you will have a refresh button on the page when and only when it is appropriate. -- Phil Housley - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
What are the implications of turning this one? D/ On Sep 30, 2009, at 1:23 AM, Igor Vaynberg wrote: the javadoc in the later versions mentions that it is enabled by default, however if you are using the default secondlevel caching page store it will be disabled... -igor On Tue, Sep 29, 2009 at 11:10 PM, Carlo Camerino carlo.camer...@gmail.com wrote: hi, actually i'm able to make it work some how using this setting getPageSettings().setAutomaticMultiWindowSupport(true); it creates a new page map everytime i open a page in a new tab or new window. however in the wicket documentation it says that it is enabled by default. but upon checking it seems that it is not enabled by default that's why i'm confused. any recommendations regarding this? i can now check the page map name for each page and throw a redirect if a new page map is encountered other than the default. carlo On Wed, Sep 30, 2009 at 5:50 AM, Phil Housley undeconstruc...@gmail.com wrote: 2009/9/29 Carlo Camerino carlo.camer...@gmail.com: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. I've been playing with the ideas from http://day-to-day-stuff.blogspot.com/2008/10/wicket-extreme-consistent-urls.html for something of my own, which might fit the bill in a way. Following that you can convince wicket to serve up every instance of a mounted page from exactly the same URL. That means if you copy the url, you get a brand new instance of the page. You lose the ability to refresh, but if you are being strict on that sort of thing, I guess you will have a refresh button on the page when and only when it is appropriate. -- Phil Housley - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
hi, actually i'm able to make it work some how using this setting getPageSettings().setAutomaticMultiWindowSupport(true); it creates a new page map everytime i open a page in a new tab or new window. however in the wicket documentation it says that it is enabled by default. but upon checking it seems that it is not enabled by default that's why i'm confused. any recommendations regarding this? i can now check the page map name for each page and throw a redirect if a new page map is encountered other than the default. carlo On Wed, Sep 30, 2009 at 5:50 AM, Phil Housley undeconstruc...@gmail.com wrote: 2009/9/29 Carlo Camerino carlo.camer...@gmail.com: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. I've been playing with the ideas from http://day-to-day-stuff.blogspot.com/2008/10/wicket-extreme-consistent-urls.html for something of my own, which might fit the bill in a way. Following that you can convince wicket to serve up every instance of a mounted page from exactly the same URL. That means if you copy the url, you get a brand new instance of the page. You lose the ability to refresh, but if you are being strict on that sort of thing, I guess you will have a refresh button on the page when and only when it is appropriate. -- Phil Housley - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
the javadoc in the later versions mentions that it is enabled by default, however if you are using the default secondlevel caching page store it will be disabled... -igor On Tue, Sep 29, 2009 at 11:10 PM, Carlo Camerino carlo.camer...@gmail.com wrote: hi, actually i'm able to make it work some how using this setting getPageSettings().setAutomaticMultiWindowSupport(true); it creates a new page map everytime i open a page in a new tab or new window. however in the wicket documentation it says that it is enabled by default. but upon checking it seems that it is not enabled by default that's why i'm confused. any recommendations regarding this? i can now check the page map name for each page and throw a redirect if a new page map is encountered other than the default. carlo On Wed, Sep 30, 2009 at 5:50 AM, Phil Housley undeconstruc...@gmail.com wrote: 2009/9/29 Carlo Camerino carlo.camer...@gmail.com: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. I've been playing with the ideas from http://day-to-day-stuff.blogspot.com/2008/10/wicket-extreme-consistent-urls.html for something of my own, which might fit the bill in a way. Following that you can convince wicket to serve up every instance of a mounted page from exactly the same URL. That means if you copy the url, you get a brand new instance of the page. You lose the ability to refresh, but if you are being strict on that sort of thing, I guess you will have a refresh button on the page when and only when it is appropriate. -- Phil Housley - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Preventing Copy Pasting URL's In Same Browser Session
Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos
Re: Preventing Copy Pasting URL's In Same Browser Session
On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
could'nt he just have a page map with a size of 0? Of course reloads would'nt work and probably a bunch of other stuff too.. Seems like at strange thing to limit on though. 2009/9/29 Matej Knopp matej.kn...@gmail.com On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
ya it's sort of our requirement i don't think i would set my pagemap to 0. i'm thinking of a control i could use in order to determine that this page is accessed. i'm thinking of the best way to do it though. i could maybe include a hidden field in each of my form that i have to check each time and check each request. i don't know if this is possible. On Wed, Sep 30, 2009 at 1:29 AM, nino martinez wael nino.martinez.w...@gmail.com wrote: could'nt he just have a page map with a size of 0? Of course reloads would'nt work and probably a bunch of other stuff too.. Seems like at strange thing to limit on though. 2009/9/29 Matej Knopp matej.kn...@gmail.com On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
I'm guessing they are trying to limit users from taking a test in one window and seeing the previous answers in another. -Clint On Tue, Sep 29, 2009 at 12:29 PM, nino martinez wael nino.martinez.w...@gmail.com wrote: could'nt he just have a page map with a size of 0? Of course reloads would'nt work and probably a bunch of other stuff too.. Seems like at strange thing to limit on though. 2009/9/29 Matej Knopp matej.kn...@gmail.com On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
Ahh good example for usage :) 2009/9/29 Clint Checketts checke...@gmail.com I'm guessing they are trying to limit users from taking a test in one window and seeing the previous answers in another. -Clint On Tue, Sep 29, 2009 at 12:29 PM, nino martinez wael nino.martinez.w...@gmail.com wrote: could'nt he just have a page map with a size of 0? Of course reloads would'nt work and probably a bunch of other stuff too.. Seems like at strange thing to limit on though. 2009/9/29 Matej Knopp matej.kn...@gmail.com On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
Okay in that case you should be able to use some of the stuff that are used in apps that are supposed be *cross*-*site* request *forgery proof*, search the list for that. 2009/9/29 Carlo Camerino carlo.camer...@gmail.com ya it's sort of our requirement i don't think i would set my pagemap to 0. i'm thinking of a control i could use in order to determine that this page is accessed. i'm thinking of the best way to do it though. i could maybe include a hidden field in each of my form that i have to check each time and check each request. i don't know if this is possible. On Wed, Sep 30, 2009 at 1:29 AM, nino martinez wael nino.martinez.w...@gmail.com wrote: could'nt he just have a page map with a size of 0? Of course reloads would'nt work and probably a bunch of other stuff too.. Seems like at strange thing to limit on though. 2009/9/29 Matej Knopp matej.kn...@gmail.com On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
Your options here are rather limited. Wicket or not, it is still a web application. HTTP is a stateless protocol. There are ways/hacks to detect opening page in new window/tab but they require javascript and are not 100% bullet proof. If you need real solution for this forget about web applications. Do it as java applet or flash or silverlight or something similar. -Matej On Tue, Sep 29, 2009 at 7:55 PM, Carlo Camerino carlo.camer...@gmail.com wrote: ya it's sort of our requirement i don't think i would set my pagemap to 0. i'm thinking of a control i could use in order to determine that this page is accessed. i'm thinking of the best way to do it though. i could maybe include a hidden field in each of my form that i have to check each time and check each request. i don't know if this is possible. On Wed, Sep 30, 2009 at 1:29 AM, nino martinez wael nino.martinez.w...@gmail.com wrote: could'nt he just have a page map with a size of 0? Of course reloads would'nt work and probably a bunch of other stuff too.. Seems like at strange thing to limit on though. 2009/9/29 Matej Knopp matej.kn...@gmail.com On Tue, Sep 29, 2009 at 6:48 PM, Pedro Santos pedros...@gmail.com wrote: We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. Crazy thing. How about to include an request counter to your url encode/decode strategy? That wouldn't work. Or it would prevent refresh as well. This is not really doable. If you need this kind of control web applications simply aren't what you should be doing. -Matej On Tue, Sep 29, 2009 at 1:41 PM, Carlo Camerino carlo.camer...@gmail.comwrote: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. Thanks Carlo - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org -- Pedro Henrique Oliveira dos Santos - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
I am not aware that Wicket has direct support for this kind of (mis-)behavior. You can, however employ some kind of cheating here. if you set the http headers to no-cache with the help of a servlet filter, the browser will not allow the page to be copy-pasted from local cache, and will re-request the page. if you include a (crypted) counter as one of the page parameters, you can easily check if this page was already served (if the counter is lower or equal than the last served url) and redirect to an error page accordingly. to fully disable the browser-cache use: response.addHeader(“Pragma”, “no-cache”); response.addHeader(“Cache-Control”, “no-cache”); response.addHeader(“Cache-Control”, “must-revalidate”); response.addHeader(“Expires”, “Mon, 8 Aug 2006 10:00:00 GMT”); // some date in the past BR Andreas The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
What happens if the user (perhaps accidentally) refreshes page? -Matej On Tue, Sep 29, 2009 at 11:43 PM, Andreas Petersson andr...@petersson.at wrote: I am not aware that Wicket has direct support for this kind of (mis-)behavior. You can, however employ some kind of cheating here. if you set the http headers to no-cache with the help of a servlet filter, the browser will not allow the page to be copy-pasted from local cache, and will re-request the page. if you include a (crypted) counter as one of the page parameters, you can easily check if this page was already served (if the counter is lower or equal than the last served url) and redirect to an error page accordingly. to fully disable the browser-cache use: response.addHeader(“Pragma”, “no-cache”); response.addHeader(“Cache-Control”, “no-cache”); response.addHeader(“Cache-Control”, “must-revalidate”); response.addHeader(“Expires”, “Mon, 8 Aug 2006 10:00:00 GMT”); // some date in the past BR Andreas The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
Matej Knopp schrieb: What happens if the user (perhaps accidentally) refreshes page? -Matej he would get an error page using the described approach. clearly not what you would want in a general-purpose web app. BR Andreas - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
Re: Preventing Copy Pasting URL's In Same Browser Session
2009/9/29 Carlo Camerino carlo.camer...@gmail.com: Hi everyone, We have this requirement in which we cannot allow the customer to copy paste the url that's appearing in the address bar into the same browser. For example in a different tab or in a new window. This can easily be done in Wicket Framework since the url has a corresponding page attached to it. For example if i get http://localhost/wicket:interface=1 appearing in the address bar, I can open anew tab paste the url and I could get into the same page. The users don't want this behavior. Could I make it work in such a way that I copy http://localhost/wicket:inteface=1, when i try to copy and paste it, it will redirect me to an error page? This happens even after the user has already logged in. Really need help on this one. I've been playing with the ideas from http://day-to-day-stuff.blogspot.com/2008/10/wicket-extreme-consistent-urls.html for something of my own, which might fit the bill in a way. Following that you can convince wicket to serve up every instance of a mounted page from exactly the same URL. That means if you copy the url, you get a brand new instance of the page. You lose the ability to refresh, but if you are being strict on that sort of thing, I guess you will have a refresh button on the page when and only when it is appropriate. -- Phil Housley - To unsubscribe, e-mail: users-unsubscr...@wicket.apache.org For additional commands, e-mail: users-h...@wicket.apache.org
