Re: Compiling a single Java class to a plain JavaScript file

2009-01-10 Thread Reinier Zwitserloot
rapodaca: Reread my original post. Even if you turn the mangling off, the name would then become: com.mypackage.MyClass::hello() Instead of what you probably want: hello Due to the parens, you'd need to call it like so: window.[com.mypackage.MyClass::hello()](); instead of like so:

Re: Programmatically Generating Physical Key

2009-01-07 Thread Reinier Zwitserloot
I assume you meant faking the pressing of a key on the keyboard. You can't do that directly, no, but you can sort-of call the keylisteners on any particular object. For example, let's say you have a TextBox instance called 'textBox', and you want to simulate pressing the 'X' button. You'll

Re: Compiling a single Java class to a plain JavaScript file

2009-01-07 Thread Reinier Zwitserloot
rapodaca: The GWTCompiler is simply what drives the myProject-compile command; it does the same thing (translates a whole bunch of things into a single JS file), so I doubt its what you're looking for. What you want can't really be done. Java isn't javascript. Take your example just to

Re: Newbie Question on GWT/JSON

2009-01-05 Thread Reinier Zwitserloot
Whoops, forgot my footnote: [1] http://www.ietf.org/rfc/rfc4627.txt I don't know if that makes it official. I believe the official entity that vets mime types is IANA, but on their site I couldn't quickly get to an official list of recognized mime types. Still, if Doug Crockford says the type

Re: Performance overhead of virtual methods

2009-01-03 Thread Reinier Zwitserloot
Assuming you meant 'virtual' in the C++ sense, then, nothing. On Jan 3, 1:09 pm, Jason Morris lem...@gmail.com wrote: nathan.r.matth...@googlemail.com wrote: Hi GWTers I'm writing some performance sensitive code for GWT. I'm wondering how GWT compiles virtual functions to JavaScript.

Re: Newbie Question on GWT/JSON

2009-01-03 Thread Reinier Zwitserloot
Whatever possessed you to send the application/x-www-form- urlencoded as mime type? JSON is nothing like form-encoded. That's like sending your HTML as image/jpeg just for kicks. Don't do that. JSON's mimetype is application/json (see [1] below). If you want to be nice, you should actually set

[gwt-contrib] Am I going nuts? JavaScriptObject fields not accessible in JSNI.

2009-01-03 Thread Reinier Zwitserloot
I tried to do something fairly simple: package testpackage; public class MyClass { @SuppressWarnings(unused) private JavaScriptObject rawMap = JavaScriptObject.createObject(); private native void setSomething(String x) /*-{ th...@testpackage.client.myclass::rawMap[foo] = x; }-*/;

[gwt-contrib] Re: Am I going nuts? JavaScriptObject fields not accessible in JSNI.

2009-01-03 Thread Reinier Zwitserloot
I swear I looked for 30 seconds+ for typos and even copypasted the package name, but, of course, I typoed the field name. Ignore this, my bad. On Jan 4, 8:23 am, Reinier Zwitserloot reini...@gmail.com wrote: I tried to do something fairly simple: package testpackage; public class MyClass

Re: jsp + javascript code not working. why?

2009-01-01 Thread Reinier Zwitserloot
The bit you posted isn't the problem. On Jan 1, 11:07 pm, Hasan Turksoy hturk...@gmail.com wrote: Hi all, i want to change my main html page to a jsp page - to get some request parameters to process in gwt code. But its not working... Below is a simple test code which is working on tomcat

Re: Login security question

2008-12-29 Thread Reinier Zwitserloot
akutz: ** YOU COULDNT BE MORE WRONG ** SSL protects against many things, but it does *NOT* protect against XSRF. Which is -exactly- what you're opening yourself up to if you only rely on the cookie automatically sent by the browser in the form of the 'Cookie' header - which is the mechanism

Re: Login security question

2008-12-29 Thread Reinier Zwitserloot
So I'm not to reply to you but you do engage in a long missive to explain your situation and then ask for help? Let me know how calling people an ass before asking for help works out for you. On Dec 30, 12:47 am, akutz sak...@gmail.com wrote: I appreciate the response, but you're a complete

Re: Making a request to another page

2008-12-22 Thread Reinier Zwitserloot
RequestBuilder makes an AJAX call. It doesn't redirect the browser. use setLocation for that, which I think is in the standard GWT API someplace. Otherwise, use some JSNI to do: window.location.href = http://whatever.com/;; if you really meant to make an AJAX call: Yes, you need a callback. You

Re: What am I misunderstanding about the event model?

2008-12-22 Thread Reinier Zwitserloot
1) You can use something called 'anonymous inner classes'. google it. They look something like this: someButton.addClickListener(new ClickListener() { public void onClick () { /* code that runs when someButton is clicked goes here. */ }}); This does produce 2 class files, but this is an

Re: GWT 1.5.3 with Eclipse

2008-12-09 Thread Reinier Zwitserloot
You don't really need a plugin. The getting started guide (it's right there on the main GWT website) shows how to run the projectCreator/applicationCreator scripts. These already generate the .project file that eclipse needs (make sure you follow the 'I have eclipse' part of the getting started

Re: Size of code download in GWT

2008-12-07 Thread Reinier Zwitserloot
To be a bit more verbose about it: Exactly one individual ASKDJALSDJASLKDJSAD.js.html file is downloaded in its entirety by any given user visiting your site. Which one gets downloaded depends on the browser used, and if you're using localization or other generator splits, that too. It certainly

Re: Discussion on security-for-gwt-applications

2008-12-03 Thread Reinier Zwitserloot
krona: If you are getting the session ID from the cookie, your web service is still vulnerable to XSRF (wikipedia it). Make GWT send the session ID in the body of requests (such as a parameter to GWT-RPC or stuff it in the JSON you're sending to your PHP). On Dec 4, 1:24 am, [EMAIL PROTECTED]

Re: Your opinion sought: Jetty or Tomcat?

2008-12-02 Thread Reinier Zwitserloot
Not Ken Shabby: Imagine here your -exact- reply, except swap 'tomcat' (note: it's not an acronym, you don't need to capitalize it. Jetty isn't either) with 'jetty' and vice versa. In other words, your argument is only relevant for you. It makes for an excellent reason to switch for those

Re: SecureRemoteService and Servlet. The battle against XSRF.

2008-12-02 Thread Reinier Zwitserloot
quentin: URLs aren't designed to be protected. At all. Cookies aren't exactly locked away in Fort Knox on your harddrive, but browsers at least have the good sense to understand that they shouldn't send arbitrary pieces in the cookiefile to arbitrary servers. Not so for URLs. To wit: 1)

Re: SecureRemoteService and Servlet. The battle against XSRF.

2008-12-01 Thread Reinier Zwitserloot
Your plan to use an interface extending RemoteService to be consistent in how you read the sessionID out of the request body and not the cookie sounds excellent. SSL does not protect against XSRF by itself. However, it does turn moot the general issue of having session IDs hit the line. The long

Re: GWT with non-Java backend

2008-12-01 Thread Reinier Zwitserloot
Yes, tons of people have used GWT on the front and something that isn't java on the back-end. You can transfer data using JSON, XML (but, really, don't. XML is stupid as a wire protocol), or whatever binary format you think is useful. The only caveat (and this applies to using GWT-RPC as well),

Re: SecureRemoteService and Servlet. The battle against XSRF.

2008-11-29 Thread Reinier Zwitserloot
You're asking me if some Reinier Approved algorithm would meet with my approval? Uh, yes. I have a question for you, though: Does a gregor approved method of shooting a puppy meet with your approval? If not, can you explain why? On Nov 28, 9:02 pm, gregor [EMAIL PROTECTED] wrote: @Reinier

Re: Timer In Gwt

2008-11-29 Thread Reinier Zwitserloot
Not A Problem - Just Add The Timer Behaviour To Your Custom Subclass Of Label. For Example, You Could Add A SetVisible Method To This Label Subclass That Also Includes a Milliseconds Parameter (The Time To Display The Message). All Your Method Does Is Call Super.SetVisible (X), And Then Start The

Re: TextArea cannot be resolved to a type

2008-11-29 Thread Reinier Zwitserloot
Go through the GWT Getting started guide. You've screwed up your installation somehow, or you're not using the right command line. It's not a matter of code, it's just that some tool in the chain can't find the TextArea class code. For the rest - really, this is a forum, not a university. Just

Re: SecureRemoteService and Servlet. The battle against XSRF.

2008-11-29 Thread Reinier Zwitserloot
Replies inline... On Nov 29, 2:08 pm, gregor [EMAIL PROTECTED] wrote: a) Don't send sessionID as cookies - deliberately configure app server to stop it using cookies for tracking sessionIDs This does mean that sessions don't survive the user reloading the page or closing his browser. This is

Re: Problems adding a Digg This link

2008-11-29 Thread Reinier Zwitserloot
I doubt digg's js thingie is written by an intelligent developer (digg has a track record of sorts). There IS a way to write such widget scripts so they work in all situations, including the peculiar way GWT builds webpages, but not many web widgets work this way. So, assuming for a moment that

Re: TextArea cannot be resolved to a type

2008-11-29 Thread Reinier Zwitserloot
(applets can only connect to the same server as well i believe), I think I have hit a dead end. What other options do I have? What do you recommend I use to create this type of web application? Thanks for your help. On Nov 29, 11:40 am, Reinier Zwitserloot [EMAIL PROTECTED] wrote: Go through

Re: SecureRemoteService and Servlet. The battle against XSRF.

2008-11-28 Thread Reinier Zwitserloot
The solution is simple: Rewrite the session management part of your web stack so that it doesn't look at the cookie (it should completely ignore the cookie - it is there only to let the session survive when the user reloads the page / closes their browser), instead lifting the session out of the

Re: New to the GWT

2008-11-25 Thread Reinier Zwitserloot
It has no user interface other than the command line. If you're on windows, run 'cmd', that'll get you a command line. In order to learn how to use it - google for some tutorials, it's not too difficult. Most programming tools work off of the command line, so its time well spent. On Nov 25,

Re: How do I get browser autocomplete on a login form

2008-11-23 Thread Reinier Zwitserloot
, could you show a full example? Thanks a lot, Dan On Nov 22, 1:07 am, Reinier Zwitserloot [EMAIL PROTECTED] wrote: You can wrap existing elements in GWT 1.5: new TextBox(DOM.getElementById(loginUsernameBox)); new PasswordTextBox(DOM.getElementById(loginPasswordBox)); then you can do

Re: Your opinion sought: Jetty or Tomcat?

2008-11-22 Thread Reinier Zwitserloot
To summarize Alex' complaint: Your plans will add hardship to my work. Please don't do that. That's a fair point, but I believe this point was understand from the start. What size app do you have, if the 4 second bootup time for tomcat doesn't bother you? It must be enormous. Hosted mode

Re: load property file from a list of property files

2008-11-21 Thread Reinier Zwitserloot
Zujee, that's not how you solve this problem. Make the client download the properties from the server. Basically, have a simple servlet that takes one parameter and returns the appropriate properties, e.g. as a HashMap which you transfer via GWT- RPC. If you don't know what GWT-RPC is, its one

Re: How do I get browser autocomplete on a login form

2008-11-21 Thread Reinier Zwitserloot
These features generally only work if the textbox and passwordbox are in the initial HTML. In GWT's normal modus operandi, the boxes are added dynamically by the javascript. The solution is to have the boxes in the static HTML file that bootstraps GWT (normally auto-generated by the

Re: java.net.InetAddress

2008-11-20 Thread Reinier Zwitserloot
You CAN make a browser go to another server, but there's no way to receive information from it. Its possible there's some hacky way to figure something out, but this is just doomed to failure, because email servers don't have to be webservers, and vice versa. For example, there are still loads

Re: JSON

2008-11-20 Thread Reinier Zwitserloot
Reinier. I've being tryign with by this way, but my problem is accessing associative arrays. There is one way to do that?! On Wed, Nov 19, 2008 at 6:43 PM, Reinier Zwitserloot [EMAIL PROTECTED]wrote: Yeah, I kinda sorta did with my new proposed JSON library. But you can go even faster

Re: authentication in GWT

2008-11-20 Thread Reinier Zwitserloot
walden, please, pretty pretty please, stop confusing GWT users with your very bad advice. You just restated your earlier arguments without taking into consideration anything I wrote. Sticking your fingers in your ears and singing loudly doesn't really work, and I request the common courtesy that

Re: Using GWT to draw line

2008-11-20 Thread Reinier Zwitserloot
+ on the gwt-diagrams suggestion. Doing line drawings or drag and drop in a webbrowser are both rather difficult (but doable) proposals that come with a boatload of caveats, idiosyncrasies, and other curious perversions. You are far better off using a well tested library written by an expert than

Re: JSON

2008-11-19 Thread Reinier Zwitserloot
Yeah, I kinda sorta did with my new proposed JSON library. But you can go even faster. Create a java class which mimics essentially exactly the structure of your JSON - with getter methods for everything relevant. Give this class NO fields whatsoever, just getters. Then let it extend

Re: Can't figure saving out.

2008-11-18 Thread Reinier Zwitserloot
Loki, like the compiler error says: make them final. e.g.: final textArea text = new TextArea(); final Button save = new Button(whatever); On Nov 18, 5:29 am, Loki [EMAIL PROTECTED] wrote: Perhaps my brain is just fried-- the longer I code, the less sense coding seems to make to me, so

Re: Body Background disappear

2008-11-18 Thread Reinier Zwitserloot
Try using CSS: body { background-image: url(images/backgrnd.jpg); } On Nov 16, 11:41 am, Michi_de [EMAIL PROTECTED] wrote: Hi! I've a strange bug when using the GWT: my body background=images/backgrnd.jpg seems not to work anymore! I see the background image for a second and when the

Re: authentication in GWT

2008-11-18 Thread Reinier Zwitserloot
HTTP Authentication? Don't make me laugh - it's ridiculous design, and more importantly, users don't get it. at all. They think your app is broken and try to browse away (only they can't, that authentication dialog box is modal). There's also no better security there than what you can do with

Re: authentication in GWT

2008-11-18 Thread Reinier Zwitserloot
@Rick: Ahh, that makes sense. However, its not logging out of HTTP Basic. Its just invalidating a session ID. I also doubt that it'll work properly if done in one browser session - the browser will keep re-sending the Authorization header regardless of your invalidated session. The browser

Re: Tor: Awesome.

2008-10-27 Thread Reinier Zwitserloot
Uh, wrong newsgroup. My bad. On Oct 26, 6:33 pm, Reinier Zwitserloot [EMAIL PROTECTED] wrote: Just downloaded the beta python for netbeans. -awesome-. One thing that is seriously borked in this install, though: whitespace. Backspacing to go back to previous levels is all screwed up and tends

Re: Basic login security/session management question

2008-10-27 Thread Reinier Zwitserloot
inline responses... On Oct 1, 4:22 am, nogridbag [EMAIL PROTECTED] wrote: 1) If we can't trust cookies, what's the point of using cookies at all? As a storage space to save the session ID between sessions. Users do sometimes close their web browsers, or at least the tab with your page on it.

Tor: Awesome.

2008-10-26 Thread Reinier Zwitserloot
Just downloaded the beta python for netbeans. -awesome-. One thing that is seriously borked in this install, though: whitespace. Backspacing to go back to previous levels is all screwed up and tends to jump in steps of 4, right in the middle of indents. So, if for example I have a method indented

Re: possible emulation bug: sinh

2008-09-25 Thread Reinier Zwitserloot
I'd create an issue and toss that one-liner in there too, after checking that there isn't one already there, of course. google lucky gwt issue tracker. On Sep 25, 11:27 am, Thomas Broyer [EMAIL PROTECTED] wrote: On 25 sep, 06:53, rjcarr [EMAIL PROTECTED] wrote: Looking at GWT Math.java, I

Re: question about Constants and Messages

2008-09-24 Thread Reinier Zwitserloot
You can create the singleton inside the interface. e.g: public class MyImages implemens AbstractImageStoreThingie { AbstractImagePrototype closeButton(); ... more AIPs. public static MyImages STORE = (MyImages)GWT.create(MyImages.class); } Then you can just go:

Re: iPhone toggle switch implementation

2008-09-19 Thread Reinier Zwitserloot
That's not how stylesheets work. You have two options: A) change the style of a given element. e.g. use add/removeStyleName, to change the styling info of your widget. for example: myWidget.setStyleName(someStyleClassThatIsAlwaysApplied); if ( toggledOn ) {

Re: GWT 1.5 Now Available

2008-09-19 Thread Reinier Zwitserloot
It's not, there's a known problem with the google download link, for some people it just screws up. I suggest you try to download it from another network. On Sep 18, 12:52 pm, vector [EMAIL PROTECTED] wrote: Hi. I have tried to download latest version for windows. The file is corrupted. I

Re: questions on Login Security FAQ

2008-09-19 Thread Reinier Zwitserloot
I don't know jasypt, so I can't make guarantees (actually, nobody can, but you know what I mean). However, there are two good signs: 1) The API is specifically for password checking. This is a lot better than using a generic hasher and doing the salting yourself. The authors of the library had

Re: questions on Login Security FAQ

2008-09-19 Thread Reinier Zwitserloot
Answers inline... On Sep 19, 3:12 pm, JasonG [EMAIL PROTECTED] wrote: First of all, I don't understand your (A) response.   I said you don't need to worry so much about passing session IDs since the app server will pretty much handle that for you... and your response seems to just reiterate

Re: questions on Login Security FAQ

2008-09-18 Thread Reinier Zwitserloot
JasonG: Thanks for being a nice example of the cluelessness of your average programmer. You've got it all, totally, 100% backwards. Don't feel too insulted, you're like almost everyone else out there. However, you should most definitely stop handing out security advice. Seriously. A) J2EE

Re: questions on Login Security FAQ

2008-09-18 Thread Reinier Zwitserloot
We need to invent a TCP/IP compatible cluestick on the double! On Sep 18, 6:36 pm, Ian Petersen [EMAIL PROTECTED] wrote: On Thu, Sep 18, 2008 at 11:31 AM, Rob Coops [EMAIL PROTECTED] wrote: Always fun to read a Reinier comment to pretty much anyone. Seriously Reinier though you usualy are

Re: GWT's HTTPS design consideration and guideline?

2008-09-17 Thread Reinier Zwitserloot
yes, there are differences. Testing: Use -noserver. Google for it on this newsgroup for more info on how that works. SSL has three notable differences. These aren't the only ones, but probably the biggest surprises: CACHING: Web browsers were designed to cope with idiot web server maintainers.

Re: Question on parsing JSON string

2008-09-17 Thread Reinier Zwitserloot
Yah, my new JSON library will. But it's not ready quite yet. Well, the reading bit's ready - still working on writing. If you want to beta test it, mail me. The core contributors are more or less agreed that the current offering is a bit weak so you might see it as part of the core GWT library in

Re: Problems with gwt 1.5

2008-09-11 Thread Reinier Zwitserloot
Your classpath is screwed up. Half the classes are being loaded from an older version of GWT, and half are loaded from a newer version. Double check your classpath; possibly you're picking up a gwt-user.jar from one place and a gwt-dev-XYZ.jar from another. If you installed GWT 1.5 by unzipping

Re: is communication over GWT-RPC secure

2008-09-11 Thread Reinier Zwitserloot
harimack: all https is as safe as you can make it, with the following caveats: 1. you NEED a signed cert from a root cert authority. This costs 100 dollars or more. 2. The designers of the https spec made some serious screwups way back when but are now afraid to fix their mistakes. You may

Re: Download file with GWT

2008-09-11 Thread Reinier Zwitserloot
1. The server has to send the file with a data type of application/ octet-stream. 2. You can't use an AJAX call (RequestBuilder / HttpRequest / GWT- RPC), those will never generate a save as box on the user's client. Use: 1. A link that a user clicks on. 2. open a new window using Window.open 3.

[gwt-contrib] Re: New JSON API proposal

2008-09-10 Thread Reinier Zwitserloot
it.  Or if there are alternate ways to end a string literal, like somehow encoding a character that will be recognized as an end quote. On Sun, Sep 7, 2008 at 6:38 PM, Reinier Zwitserloot [EMAIL PROTECTED]wrote: I haven't tested it yet, but I'm throwing it out there for review of the concept of what's

[gwt-contrib] new JSON api: Design problem.

2008-09-10 Thread Reinier Zwitserloot
I didn't quite think the way you can use the new API to create new JSON objects through. Specifically, in order to support the 'set' notation, Any given lookup will always need to tree out from the root, every time, which could be a little slow for very deeply nested JSON, and take up more

Re: GWT + comet?

2008-09-07 Thread Reinier Zwitserloot
As you said, comet is a complex problem on the server side. On the client it's relatively straightforward. Some issues: 1) You either need an async webserver (such as something based on the fairly new java Simple, or the continuation support available in jetty), or you need an OS + VM combo

Re: GWT + comet?

2008-09-07 Thread Reinier Zwitserloot
direction, Mark On Sep 7, 6:30 am, Reinier Zwitserloot [EMAIL PROTECTED] wrote: As you said, comet is a complex problem on the server side. On the client it's relatively straightforward. Some issues: 1) You either need an async webserver (such as something based on the fairly new

Re: Need to get images original dimensions before displaying.

2008-09-03 Thread Reinier Zwitserloot
Use onLoad, but also start a timer, and check after 10 seconds. If the image has dimensions that aren't 0x0, remove the onload trigger, and do the resize. On Sep 2, 4:00 pm, darkflame [EMAIL PROTECTED] wrote: Dosnt really help me. I cant even show them at the correct size without knowing what

Re: Google Chrome

2008-09-03 Thread Reinier Zwitserloot
askar: Did you try to contribute to GWT? They accept anyone, and are willing to listen to any patch proposal you have, provided you of course do the work. It doesn't look like anyone cares if you actually work at google. This meritocracy system is essentially the same as any open source project,

Re: Need to get images original dimensions before displaying.

2008-09-02 Thread Reinier Zwitserloot
You can't resize images in the browser. They'll look really -really- bad (nearest point resizing in at least IE6). Resize them on the server. When requesting them, send the size of the current window along. On Sep 2, 1:59 pm, darkflame [EMAIL PROTECTED] wrote: What I'm trying to do; Display

Re: Reading CSV files for rendering

2008-08-29 Thread Reinier Zwitserloot
Reading CSV files is a matter of applying String.split(\\n) and String.split(,). That's all you need to do parse it. Rendering it - of course you need to do that yourself. GWT doesn't have a magic: GWT.renderYahooFinanceCSVDataJustTheWayIAmImaginingIt() function. We're working on it though. On

[gwt-contrib] Re: GWT 1.5 long JSNIs vs. Dates.

2008-08-29 Thread Reinier Zwitserloot
 am, Ian Petersen [EMAIL PROTECTED] wrote: On Fri, Aug 29, 2008 at 3:05 AM, Reinier Zwitserloot [EMAIL PROTECTED] wrote: I don't use GWT-Serialization to talk to my server. The server sends timestamps as milliseconds. I'd like to turn these milliseconds into javascript Date objects. How do

Re: do somebody know how to access private field and method in gwt widget using jsni from custom class ?

2008-08-27 Thread Reinier Zwitserloot
Just access it. In JSNI, 'final', and 'private' do not exist. You'll need to read up on JSNI. Here's an example: public static native callGetSplitElement(HorizontalSplitPanel panel) / *-{ [EMAIL PROTECTED]::getSplitElement() (); }-*/; Note the double ()(). The first () is part of the