I think that's exactly what's happening. It looks like the HtmlArea component uses a generatePath(IAsset, String) method to create a URL pointing to needed JavaScript files. I guess it doesn't include the MD5 checksum you mention.

Anybody else need HtmlArea to work with 3.0.3 and know enough about components and assets to get it working? I have to go in to school and grade papers today (It's spring break.), but I'll take a stab at it this evening.

Todd

On Apr 5, 2005, at 2:29 AM, Richard Lewis-Shell wrote:

The security hole in the asset service has been closed in 3.0.3 (and CVS HEAD) by requiring requestors of assets to supply a MD5 digest of the asset. Tapestry should be generating asset URLs with the digests included. Are you using non-Tapestry code to generate Tapestry URLs?

Richard

Todd O'Bryan wrote:
I'm getting errors trying to use HtmlArea from Tassel and am afraid the upgrade could have broken something. (Eclipse also crashed and removed everything from my WEB-INF directory, so the problem could be unrelated to the upgrade, and could be due to my not getting the rebuild exactly right.)
When it tries to load the .js and .css files from the JAR, it instead loads the Tapestry Exception page, and I get
Service asset requires exactly 2 service parameters.
Did something change in 3.0.3 or should I look elsewhere for the problem?
Thanks,
Todd
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

--------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]



---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]



Reply via email to