Just to confirm my understanding, is clickjacking not an issue when
using http://twitter.com/ but it potentially is when using http://m.twitter.com/
?

Can you suggest what the preferred way to provide this type of easy-
linking functionality might be for mobile?

Cheers,

James

On Mar 3, 11:15 pm, Alex Payne <a...@twitter.com> wrote:
> In order to prevent clickjacking attacks, we had to disable this 
> functionality.
>
>
>
> On Tue, Mar 3, 2009 at 13:44, aschobel <ascho...@gmail.com> wrote:
>
> > To clarify, we only want to prepopulate the status field.
>
> > This works on the standard version, doesn't work on the mobile
> > version.
>
> > It used to work on mobile version according to this thread:
>
> >http://groups.google.com/group/twitter-development-talk/browse_thread...
>
> > Cheers,
> > Andreas
>
> > Follow us on Twitter @3banana
> >http://twitter.com/3banana
>
> > On Mar 3, 1:00 pm, aschobel <ascho...@gmail.com> wrote:
> >> We are having problems posting status updates to the mobile version of
> >> Twitter, it looks like the status input field for the mobile version
> >> comes with a default value of "".
>
> >> <input type="text" name="status" id="status" maxlength="140" class="i"
> >> value=""/>
>
> >> For the standard version of Twitter, we can pre-populate the status
> >> field by doing opening the following page:
>
> >>http://twitter.com/home?status=Hello%20world
>
> >> Our app for Android lets folks share their notes to Twitter, and this
> >> was working fine until Twitter started detecting the user agent for
> >> Android and giving people the mobile version instead of the standard
> >> version.
>
> >> Is there a way to force the Standard version? Passing in &ui_type=s
> >> doesn't do anything.
>
> >> We support Twidroid, but not everybody has that installed.
>
> >> Cheers,
> >> Andreas
>
> >> Follow us on Twitter @3bananahttp://twitter.com/3banana
>
> --
> Alex Payne - API Lead, Twitter, Inc.http://twitter.com/al3x

Reply via email to