Tony Collen wrote:
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in the
examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Pier
Maybe it's time we make Cocoon automatically pull the continuation ID
from a ses
forwarded message:
From: "Chris Haynes" <[EMAIL PROTECTED]>
Date: 28 September 2005 13:04:53 BDT
To: "Jetty Discuss" <[EMAIL PROTECTED]>
Subject: [jetty-discuss] Microsoft IE7 compromise of session security
Reply-To: [EMAIL PROTECTED]
List-Id: Discussion for
On 10/3/05, Sylvain Wallez <[EMAIL PROTECTED]> wrote:
> Tony Collen wrote:
>
> > Pier Fumagalli wrote:
> >
> >> I found this on the Jetty list, and thought it was relevant as in the
> >> examples we tend to encode the continuation ID into the URL...
> >>
> >> This is f***ing scary!!!
> >>
> >>
Leszek Gawron wrote:
Sylvain Wallez wrote:
Tony Collen wrote:
Maybe it's time we make Cocoon automatically pull the continuation
ID from a session tied to a cookie.
That won't work as a continuation is related to the page displayed in
the browser rather than to the browser itself, as is
Le 3 oct. 05, à 12:04, Sylvain Wallez a écrit :
...I'm with Reinhard: let's tie continuations to sessions, which
should be fine for 99.9% of the use cases. Even if the continuation ID
is in the URL, it won't be accessible without the session id cookie...
+1
-Bertrand
smime.p7s
Description:
Sylvain Wallez wrote:
Tony Collen wrote:
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in the
examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Pier
Maybe it's time we make Cocoon automatically pull the c
Tony Collen wrote:
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in the
examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Pier
Maybe it's time we make Cocoon automatically pull the continuation ID
from a
On 03.10.2005, at 02:30, Tony Collen wrote:
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in
the examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Pier
Maybe it's time we make Cocoon automatically pull th
Tony Collen wrote:
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in the
examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Pier
Maybe it's time we make Cocoon automatically pull the continuation ID
from a s
Tony Collen wrote:
Maybe it's time we make Cocoon automatically pull the continuation ID
from a session tied to a cookie.
Since Cocoon 2.1.6 you can tie Cookies to a user's session. Maybe we should
change the default value with our next release for this setting.
--
Reinhard Pötz
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in the
examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Pier
Maybe it's time we make Cocoon automatically pull the continuation ID
from a session tied to a cooki
Pier
Begin forwarded message:
From: "Chris Haynes" <[EMAIL PROTECTED]>
Date: 28 September 2005 13:04:53 BDT
To: "Jetty Discuss" <[EMAIL PROTECTED]>
Subject: [jetty-discuss] Microsoft IE7 compromise of session security
Reply-To: [EMAIL PROTE
On 2 Oct 2005, at 23:17, Sylvain Wallez wrote:
Pier Fumagalli wrote:
I found this on the Jetty list, and thought it was relevant as in
the examples we tend to encode the continuation ID into the URL...
This is f***ing scary!!!
Yep. And doesn't the same already happen with the Google toolb
le to have the page rank? Same applies
also to the PageRank Firefox extension...
Sylvain
Begin forwarded message:
From: "Chris Haynes" <[EMAIL PROTECTED]>
Date: 28 September 2005 13:04:53 BDT
To: "Jetty Discuss" <[EMAIL PROTECTED]>
Subject: [jetty-discuss
: "Jetty Discuss" <[EMAIL PROTECTED]>
Subject: [jetty-discuss] Microsoft IE7 compromise of session security
Reply-To: [EMAIL PROTECTED]
List-Id: Discussion for Jetty development. discuss.lists.sourceforge.net>
Everyone concerned with data security and privacy should read the
15 matches
Mail list logo
