Hi Stephanos,
Please find here some suggenstions how to set the httponly flag for session
cookies on servlet containers prior to JEE6:
https://www.owasp.org/index.php/HttpOnly#What_is_HttpOnly.3F
Best regards,
Stephan
2014-05-26 10:22 GMT+02:00 stephanos stephan.beh...@gmail.com:
Hey Vinny,
request? And it
seems to only work after the 2nd HTTP request?
Regards
Stephan :)
On Monday, May 26, 2014 12:57:30 PM UTC+2, Stephan Hartmann wrote:
Hi Stephanos,
Please find here some suggenstions how to set the httponly flag for
session cookies on servlet containers prior to JEE6
Maybe there is a RuntimeExcepiton (e.g. the simplest would be an NPE cause your mgr is null). You could change to catch all java.lang.Exceptions or even Throwable and look if you can debug into the catch block.
Best regards,
Stephan
Gesendet:Montag, 10. Mrz 2014 um 20:40 Uhr
Hi Vinny,
Thanks for your time.
Ive uploaded an empty file and here is what I get from BlobInfo.getMd5Hash():
Development Server: d41d8cd98f00b204e9800998ecf8427e
AppEngine Prod: ZDQxZDhjZDk4ZjAwYjIwNGU5ODAwOTk4ZWNmODQyN2U=
Hope you can shed some light on this.
I dont expect that it
Hi Vinny, hi Barry,
In my first test I assumed that Base64 was used on Prod to encode the binary data of the md5 hash (as base64 is meant for encoding raw 8bit binary data). So I tried to decode it to a byte array, assuming it would be the md5 hash and encoding it with hex encoding. But as
Hi together,
On the development server BlobInfo.getMd5Hash() returns a String (why not binary array?) that seems to be the hex endoded hash value. I can proof this true with hashing the file locally.
However on Appengine getMd5Hash() returns something different.
It seems to be Base64
and opens a new
browser and we can still identify the client using session cookies?
Thanks
Romesh
On Thu, May 27, 2010 at 10:42 PM, Stephan Hartmann
hartm...@metamesh.dewrote:
Keep in mind that sessions managed by the servlet container expire after a
specific time of inactivity
Keep in mind that sessions managed by the servlet container expire after a
specific time of inactivity on the server side, so if a user comes back
after a while with his old session cookie, he will still get a new session.
According to the servlet spec, you can obtain this value with
I had some similar problems.
I changed the (primary) e-mail address of my google account to another
private one.
Regards,
Stephan
2010/5/19 thomp...@avaion.com thomp...@avaion.com
I'm not sure how I even got in this predicament, or how it can be
resolved, but here it is:
- I have a google
Hi Andy,
In general i like your idea and i stared it.
Do i understand it right, that you could already achieve this, if every
customer would have its own GAE account and deploy your app to it and add it
to his apps domain?
You just want to make this process a one-click-buy in the Google
What is your logic that initiates a session?
The container does not create a session if there is no need for it.
In a servlet you can initiate a session by calling
HttpServletRequest.getSession(true)
and in a JSP
by adding the attribute
session=true
to a page directive.
Regards,
if you want to get your data as request parameter, you should use GET
instead of POST and /or let the default contentType
application/x-www-form-urlencoded and create your json object as either
var json = {name: test}; // and let jquery convert it to a query
string
or
var json =
,
Stephan
On May 4, 2:07 am, Stephan Hartmann hartm...@metamesh.de wrote:
if you want to get your data as request parameter, you should use GET
instead of POST and /or let the default contentType
application/x-www-form-urlencoded and create your json object as either
var json
Usually, just calling
chain.doFilter(req, res)
would do the trick.
2010/4/21 Mark mar...@gmail.com
Hi,
I am trying to use a catch-all filter to support something like
mod_rewrite on apache. The goal was to let users enter a username in
the url like:
www.mysite.com/johndoe
and then
2010/3/30 Wooble geoffsp...@gmail.com
Shouldn't they be able to do so from within the web interface ?
This is basically what the App Marketplace does.
For Apps Marketpalce you need a Google Apps account and the app must be
offered there.
Also, my understanding of integrating Google App
You could also check the download counts for the different SDKs:
http://code.google.com/p/googleappengine/downloads/list
2010/3/25 Tim Hoffman zutes...@gmail.com
May be java dudes have more issues ;-)
No seriously java may be more popular for app engine than python, but
don't assume that
Have a look at the terms of service, especially section 10.2
http://code.google.com/intl/en/appengine/terms.html
2010/3/24 Jason Funk jasonlf...@gmail.com
Hello,
I have an idea for a web application and am starting to do research
on the design and implementation. I ran across GAE and it
I wouldn't set Prerelease = experimental feature (maybe someone from
Google could put some light in here).
However, e.g. the blobstore and task queue APIs are currently labled as
experimental.
2010/3/25 Jason Funk jasonlf...@gmail.com
Have a look at the terms of service, especially section
. Off the top
of my head, this includes Blobstore, Task Queues and the bulk loader
tool.
On Thu, Mar 25, 2010 at 11:00 AM, Stephan Hartmann hartm...@metamesh.de
wrote:
I wouldn't set Prerelease = experimental feature (maybe someone from
Google could put some light in here).
However, e.g
You have to register your Domain mojafirma.pl with Google Apps.
Then in the dashboard of the domain administration you can add new services,
i.e. an Google App Engine app by entering its id.
After you have added your App Engine app you can setup a subdomain for it,
like www.mojafirma.pl
Regards,
Your JSP file should be not a relative path but absolute, i.e.
jsp-file*/absoulute/path/to/*mountain.jsp/jsp-file
2010/3/16 Chris christoph.wor...@gmail.com
Hi,
I've got a strange problem with (I believe) my servlet mapping. I'm
trying to map all requests for /mountain/* to a JSP file
You should use memcache instead of your servlet env. The memcache service
will evict values if you run out of memory.
2010/3/10 Prashant Gupta nextprash...@gmail.com
Hi,
I have designed my app to keep data (within servlet env.) for all previous
requests. For each request it will first
Hi Ikai,
i wonder what exactly happens in a loading request before the first
component (piece of code) of an app is hit? In my case it is a
ServletContextListener and the time between the first log entry of the
container for the request and the the log entry from my contextInitialized
method
It is part of the servlet spec:
javax.servlet.ServletRequest.getServerName()
2010/3/3 deuce4 lynx...@gmail.com
Hi, I would like to use the subdomains of my appspot.com domain to set
initial user parameters.
I'm not really sure how to do this in Java. Google provides the
Python example
I think in your Offer class you should use getter/setter for mOfferDetail
(not a constructor to set the field).
2010/2/25 Anton Klotz dipl.ing.akl...@googlemail.com
Hi Jake,
thanks a lot for your answer.
After changing the mappedBy statement to child like this:
2010/2/25 datanucleus andy_jeffer...@yahoo.com
I think in your Offer class you should use getter/setter for mOfferDetail
(not a constructor to set the field).
Can't see why that would make the slightest difference. What does
appear iffy is that if you have a bidirectional relation then the
, you
have to do some creative work-around as proposed in GAE documentation.
Am I making sense? In any case, I'm hoping someone has an easy/reliable way
to keep tracking a counter in memory within GAE. I'll appreciate any
suggestion.
-aj
On Wed, Feb 17, 2010 at 1:56 PM, Stephan Hartmann
You say http://appid.appspot.com/test1/ hits the servlet. What happens
without a trailing slash? Is it redirected?
How does your servlet mappings look like?
2010/2/18 barak barak.ya...@gmail.com
Hello all,
I've a test servlet to deploy on gae platform, which just read
paramters from the
servlet-mapping
servlet-nametest1/servlet-name
url-pattern/test1/*/url-pattern
/servlet-mapping
On Feb 18, 6:41 pm, Stephan Hartmann hartm...@metamesh.de wrote:
You sayhttp://appid.appspot.com/test1/hits the servlet. What happens
without a trailing slash? Is it redirected
Could you please provide the source of your Employee and Department classes?
And AFAIK you must not use full qualified class names in queries but the
simple class name (Department only).
Regards,
Stephan
2010/2/16 Sushama Khadilkar sush.khadil...@gmail.com
package
Your app becomes shut down if it does not receive any requests for some
time. After that, the next request will initiate a new startup sequence, so
the implementation of the servlet spec is correct.
You should also implement ServletContextListener.contextDestroyed() to
perform cleanup of your
).
Regards,
Stephan
2010/2/17 Sushama Khadilkar sush.khadil...@gmail.com
Thanks Stephan Hartmann,
But there is another problem now .
Does the DataStore will have a Foreign Key of Department in Employee?
And , is it visible in the Employee table?
Following are my POJO's
You may consider using OSCache (http://www.opensymphony.com/oscache/) for
caching parts of JSPs with its JSP tags or whole responses (don't know if it
works with GAE).
Cheers,
Stephan
2010/2/13 abhi abhishek9...@gmail.com
@ bimbo jones -
Thanx , thats a good idea, i guess i found out how to
For authentication you could use Securityfilter (
http://securityfilter.sourceforge.net/) or Acegi (Spring Security,
http://www.acegisecurity.org/)
Don't know if either of them works with GAE. About Acegi there has been
little discussion here on the list i think.
Regards,
Stephan
2010/2/17
i think the correct pattern is **/*.csv
2010/2/17 cscsaba strongfr...@gmail.com
Hello,
What is the right way to reading files on GAE
I made this preparation below in appengine-web.xml
...
resource-files
include path=/**.csv /
/resource-files
...
but I got this error:
Hello Stephan,
I have tried several combination of include path without result.
http://imagebin.org/85235
It seems to me something other factor prevent reading this csv.
Have you tried to read resource file on GAE ?
On Feb 17, 7:22 pm, Stephan Hartmann hartm...@metamesh.de wrote:
i think
The problem is that the initialization of your app takes longer than 30
seconds.
Pinging your app doesn't help when the app is restarted due to redeployment
or maintenance, or when high traffic demands a second instance.
You should try to reduce your startup time.
regards,
Stephan
2010/2/17
Hi AJ,
Your consideration is not specific to GAE. You always have the potential
risk that a server could crash and then all your unstored data changes will
get lost.
So for critical data you should use a write-through cache. However, in a
distributed environment like GAE (but not specific to GAE,
AFAIK gzip compression is turned on by default. You can verify this by
looking at the content-encoding response header (i use the Live HTTP headers
plugin for firebug/firefox).
Regards,
Stephan
2010/2/15 zainul franciscus zainul.francis...@gmail.com
I was browsing through Google App Engine
You could try to login to app-engine with your google apps account under
https://appengine.google.com/a/YOURDOMAIN.COM/
Of course you have to create and deploy a new app instance in this account.
I guess it is related to the fact that real google accounts (like google
mail) and google apps
Jeff,
in one point i disagree.
In a high available einvironment you would have a cluster of load balanced
application servers and you would deploy new versions of your app in turn,
one at a time.
So if one instance is down the other(s) will continue serving your users
(though it might require
You are using a Java Runtime Environment (JRE) which does not include a
compiler.
You have to use a JDK instead.
Regards,
Stephan
sahil mahajan schrieb:
Hello
I am working on java google app engine. When I try to upload my
application, I receive following error
Error Details:
Nov
It seems that the classes of the JSTL are loaded by a different
classloader than the webapp classloader.
Because this class loader does not have xalan in place, it fails.
Could you please add xalan to the classpath of this classloder?
(If i do this in the eclipse plugin, it works, but only in
43 matches
Mail list logo
