On Oct 4, 8:52 am, David Given <d...@cowlark.com> wrote:

> I don't know of any web browsers that actually get Javascript security
> right when using the file: scheme --- they usually just deny everything
> (as you're finding out).
>
> How badly do you need to run this on a machine without a webserver? i.e.
> could you just install one? It would make life much simpler.

Running this application without a webserver is important.


To update where I'm at:

GWT 1.5.2
-------------------------------------------
/**
 * Internet Explorer 6 implementation of {...@link HTTPRequestImpl}.
 */
class HTTPRequestImplIE6 extends HTTPRequestImpl {

  @Override
  protected native JavaScriptObject doCreateXmlHTTPRequest() /*-{
    return new ActiveXObject("Microsoft.XMLHTTP");
  }-*/;
}


GWT 1.5.3
-------------------------------------------
/**
 * Internet Explorer 6 implementation of {...@link HTTPRequestImpl}.
 */
class HTTPRequestImplIE6 extends HTTPRequestImpl {

  @Override
  protected native JavaScriptObject doCreateXmlHTTPRequest() /*-{
    if ($wnd.XMLHttpRequest) {
      return new XMLHttpRequest();
    } else {
      try {
        return new ActiveXObject('MSXML2.XMLHTTP.3.0');
      } catch (e) {
        return new ActiveXObject("Microsoft.XMLHTTP");
      }
    }
  }-*/;
}


As quoted from http://msdn.microsoft.com/en-us/library/ms537505(VS.85).aspx

"The native XMLHTTPRequest object only permits HTTP and HTTPS urls
(regardless of zone) and permits only the following HTTP methods:
"GET", "POST", "HEAD", "PUT", "DELETE", "MOVE", "PROPFIND",
"PROPPATCH", "MKCOL", "COPY", "LOCK", "UNLOCK", "OPTIONS".

IE7's object allows only requests to the same port; IE8's object
removes that restriction."


This seems to be where I'm restricted from accessing file:\\ - a local
trusted source. Although IE is in the right by adhering to W3C
documentation. http://www.w3.org/TR/XMLHttpRequest/

"...it can be used to make requests over both HTTP and HTTPS (some
implementations support protocols in addition to HTTP and HTTPS, but
that functionality is not covered by this specification)."


And this request for the change
http://groups.google.com/group/Google-Web-Toolkit-Contributors/browse_thread/thread/c3cae4dc71580eff/2dc6dc15d51fb641
although I don't know where the order of operations is recommended by
MSDN


Right now it looks as though I'll have to create a JSNI method for
specific access on IE deployments.

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Google Web Toolkit" group.
To post to this group, send email to google-web-toolkit@googlegroups.com
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to