Re: removing JSONP support in Shindig

2012-08-09 Thread Henry Saputra
But you can only make calls to these entries if you are authenticated with OAuth or security token. Assuming you disabled anon request from external user agent. Could give example of use cases about this case? - Henry On Thu, Aug 9, 2012 at 8:43 PM, Wei CSDL Shi wrote: > > > Hi all, > > Current

removing JSONP support in Shindig

2012-08-09 Thread Wei CSDL Shi
Hi all, Currently, RPC Servlet entry, DataServiceServlet and JsonRpcServlet support a callback parameter which is added in front of a JSON response, turning the JSON into JSONP. An attacker can access this by adding a script tag with a source that links to these servlet entries on his page, when

Re: Shindig on .NET?

2012-08-09 Thread Ryan Baxter
Ilya please keep us up to date on your progress, and let us know how we can help! -Ryan On Thu, Aug 9, 2012 at 6:06 AM, Ilya Builuk wrote: > Thanks for reply! > > Yes, I've already seen negrony and considered it as "a fast and > flexible markup processor for building arbitrary parsing and render

Re: 504 errors when loading multiple copies of a gadget on a page?

2012-08-09 Thread Kris Vishwanathan
Interesting thing is it resolves some instances. In the scenario Chris tested I saw 10 instances of the same gadget with Shindig and the simple gadget.xml file on the same server. Atleast 5 of them displays well and other 5 come back with 504 errors. We tried another proxy by increasing max host c

Re: 504 errors when loading multiple copies of a gadget on a page?

2012-08-09 Thread Stanton Sievers
Hi Chris, Making sure you server can resolve its own hostname would be another thing to check. You can also turn on FINEST logging for org.apache.shindig in your webserver to see if anything useful appears in those logs. Best regards, -Stanton On Aug 9, 2012 2:46 PM, "Christopher L Selzo" wrote

Re: 504 errors when loading multiple copies of a gadget on a page?

2012-08-09 Thread Christopher L Selzo
Actually, they are on the same server! I don't see any error logs besides the 504. Chris Selzo Software Engineer, Advanced Design and Technology, SWG Strategy

Re: Looking for help - build failures on builds.a.o

2012-08-09 Thread Henry Saputra
You are the man Stanton =) - Henry On Tue, Aug 7, 2012 at 4:43 AM, Stanton Sievers wrote: > I think this issue is resolved... at least to a mostly satisfactory > result. The problem only appears to occur on one of the build machines > (ubuntu3) and all of the others (ubuntu1, 2, 4, and 5) work.

[RESULT] [VOTE] Delete the Shindig 1.0.x branch and Shindig 1.0.x branch Assembly CI tasks from builds.apache.org

2012-08-09 Thread Henry Saputra
Hi All, VOTE has been closed with this result: +1 binding Henry, Paul, Dan, Stanton, Ryan +1 non-bindig Matt, Erik No 0 or -1 So I will proceed with deleting those 2 tasks Thanks for the VOTEs - Henry On Mon, Aug 6, 2012 at 11:14 AM, Henry Saputra wrote: > HI Shindig dev community, > > I wo

Re: 504 errors when loading multiple copies of a gadget on a page?

2012-08-09 Thread Henry Saputra
504 error usually happen when there is a problem with HTTP connection from one server (in this case your Shindig server) to the target server (which is the endpoint where your gadget.xml is hosted.) Could you check access logs in your gadget.xml server to see if there any error logged? - Henry

504 errors when loading multiple copies of a gadget on a page?

2012-08-09 Thread Christopher L Selzo
I am encountering an issue where loading multiple copies of the same gadget on a page results in 504 errors. I am using the latest 2.5 Shindig. My test involves 10 copies of the gadget: I am using gadget rendering code similar

Re: Review Request: gadget_holder.js file format cause the apply patch process broken

2012-08-09 Thread Ryan Baxter
> On Aug. 4, 2012, 6:52 p.m., Ryan Baxter wrote: > > After applying the patch SVN doesn't appear to think there actually any > > changes in the file, what tool did you use to do the conversion? Maybe one > > of the committers can just run it and check in the changes. > > Marshall Shi wrote: >

Re: Shindig on .NET?

2012-08-09 Thread Ilya Builuk
Thanks for reply! Yes, I've already seen negrony and considered it as "a fast and flexible markup processor for building arbitrary parsing and rendering control structures" according to the description from site. It was useful to understand how to implement opensocial standard by exploring source

Re: Review Request: Do whitelist check before consuming resources fetching content from the gadget URI

2012-08-09 Thread Marshall Shi
--- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/6198/ --- (Updated Aug. 9, 2012, 9:42 a.m.) Review request for shindig, Ryan Baxter, Dan D