Orbeon Forms community mailing list

Default property for oxf.fr.detail.send.success.annotate

Classic

List

Threaded

7 messages Options

ajw625

Default property for oxf.fr.detail.send.success.annotate

The Buttons and Processes doc for "send" says that the default for the annotate property is "none". Looking at the orbeon-resources-private.jar/config/properties-form-runner.xml it seems the deault is actually "all". I thought "none" might have been chosen because of this security note in the doc:

SECURITY NOTE: If replace is set to all, the content of resources or redirection URLs accessible by the Orbeon Forms server are forwarded to the web browser. Care must be taken to forward only resources that users of the application are allowed to see.

So, the doc seems to be wrong. But this makes me wonder if a default of "all" was intended.

ajw625

Re: Default property for oxf.fr.detail.send.success.annotate

Sorry, wrong property. I meant oxf.fr.detail.send.success.replace.

Alessandro Vernet

Re: Default property for oxf.fr.detail.send.success.annotate

Administrator

Andrew,

Right: the default is "none". You can also see that in the code (see link below). So the documentation is correct. Does that answer your question?

https://github.com/orbeon/orbeon-forms/blob/master/src/main/scala/org/orbeon/oxf/fr/process/FormRunnerActions.scala

Alex

--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet

ajw625

Re: Default property for oxf.fr.detail.send.success.annotate

Thanks, Alex. You're right. The documentation is correct and the default is "none".

I was confused because I found this in orbeon-resources-private.jar\config\properties-form-runner.xml

<property as="xs:string" name="oxf.fr.detail.send.success.replace.*.*" value="all"/>

ajw625

Re: Default property for oxf.fr.detail.send.success.annotate

There is a comment above that line that says: "Default send parameters"

Alessandro Vernet

Re: Default property for oxf.fr.detail.send.success.annotate

Administrator

Hi Andrew,

Right, that is the value of "replace" if you're doing a send("oxf.fr.detail.send.success"). I.e., on success, the default is to do a "replace". But in general, the default is none. (And I perfectly understand how this can be confusing!)

Alex

On Wed, Jun 24, 2015 at 2:08 PM, ajw625 <[hidden email]> wrote:

There is a comment above that line that says: "Default send parameters"

--
View this message in context: http://discuss.orbeon.com/Default-property-for-oxf-fr-detail-send-success-annotate-tp4660097p4660134.html

Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com.

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].

--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet

Alessandro Vernet

Re: Default property for oxf.fr.detail.send.success.annotate

Administrator

And I meant to say: on success, the default is to do a replace = "all".

Alex

On Thu, Jun 25, 2015 at 11:12 AM, Alessandro Vernet <[hidden email]> wrote:

Hi Andrew,

Right, that is the value of "replace" if you're doing a send("oxf.fr.detail.send.success"). I.e., on success, the default is to do a "replace". But in general, the default is none. (And I perfectly understand how this can be confusing!)

Alex

On Wed, Jun 24, 2015 at 2:08 PM, ajw625 <[hidden email]> wrote:
There is a comment above that line that says: "Default send parameters"

--
View this message in context: http://discuss.orbeon.com/Default-property-for-oxf-fr-detail-send-success-annotate-tp4660097p4660134.html

Sent from the Orbeon Forms community mailing list mailing list archive at Nabble.com.

--
You received this message because you are subscribed to the Google Groups "Orbeon Forms" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [hidden email].
To post to this group, send email to [hidden email].

--
Follow Orbeon on Twitter: @orbeon
Follow me on Twitter: @avernet