Re: JSON Vulnerability Protection in CXF REST

2016-09-14 Thread Venkatesh Laguduva
Thanks Sergey! I have implemented JAX-RS WriterInterceptor and provided as a provioder in my blueprint and I could get what I required. Thanks Venkatesh Laguduva On Wed, Sep 14, 2016 at 9:48 PM, Sergey Beryozkin wrote: > Hi > > You can write a custom JSON JAX-RS MessageBodyWriter - ex, by exten

SNI not sent when using CXF WebClient v3.1.7 in Java 8?

2016-09-14 Thread Chris Lott
I'd like to ask about a behavior I see in CXF v 3.0.10 and v 3.1.7. I'm using JDK 1.8, and I have a tiny test program (see below). Our REST service is provided by Apache HTTPD (fronting Tomcat). The HTTPD is configured with 2 virtual hosts that differ only in name. A conforming client tha

Re: JSON Vulnerability Protection in CXF REST

2016-09-14 Thread Sergey Beryozkin
Hi You can write a custom JSON JAX-RS MessageBodyWriter - ex, by extending CXF JSONProvider or Jackson and overriding writeTo(...) - you'd push this prefix to the output stream first and then delegate to the super.writeTo. Or may be a much simpler option is to register JAX-RS WriterIntercept

JSON Vulnerability Protection in CXF REST

2016-09-14 Thread Venkatesh Laguduva
I am using AngularJS for the UI and CXF for RESTful services; as part of securing my webapp, I am trying to code for "JSON Vulnerability Protection"; AngularJS document is asking us to prefix certain characters to the JSON responses : extract from AngularJS Document: For example if your server nee

Re: ArrayStoreException making cookies?

2016-09-14 Thread Sergey Beryozkin
Hi Benson Is it CXF client using cxf-rt-transports-http-hc ? Is this module loaded ? I can only guess that the a server sends back a Set-Cookie header which HTTP Client is trying to process (not sure why would it do it though) Cheers, Sergey On 14/09/16 01:58, Benson Margulies wrote: After b