Where do these come from?

The "view-home" and "view-last" response types should NEVER be used generically like this and instead should be specific for the particular request flow they are part of. Along with that, they should require https or not depending on the other requests they are working with.

-David


On Apr 25, 2009, at 12:32 PM, Jacques Le Roux wrote:

Is it normal that the backHome and backLast are  not securised ?

<request-map uri="backHome">
<response name="success" type="view-home"/>
</request-map>
<request-map uri="backLast">
<response name="success" type="view-last"/>
</request-map>

Jacques


Reply via email to