Where do these come from?
The "view-home" and "view-last" response types should NEVER be used generically like this and instead should be specific for the particular request flow they are part of. Along with that, they should require https or not depending on the other requests they are working with.
-David On Apr 25, 2009, at 12:32 PM, Jacques Le Roux wrote:
Is it normal that the backHome and backLast are not securised ? <request-map uri="backHome"> <response name="success" type="view-home"/> </request-map> <request-map uri="backLast"> <response name="success" type="view-last"/> </request-map> Jacques