PDF IE security

I'm return a PDF document from Orbeon forms and when I use it with MS Internet Explorer I get the yellow security strip asking if I want to download the file.

When I select 'Download file' the page refreshes and nothing happens except that I lose all of my form state information - my xforms:output areas are now blank. I have to fill in my form and obtain the results again and select PDF print to get my printout.

I'm outputing my PDF as an attachment. I've tried uisng inline and it's a bit better, but I prefer the attachment mechanism.

With Firefox everything is OK.

Any suggestions on what I can do.

BTW - I have secured by pages using acegi but I don't think that is creating this effect.

Also there seems to be a very long delay downloading my PDF once it has been generated. In Firefox I get the download popup relatively quickly but when it then starts to perform the download there is a long delay. Is this a known issue ? I was under the impression that as soon as the download popup appears it means that the PDF has been created on the server.

Richard Shaw

¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤

Richard Shaw  
Technical Design Authority - Information Solutions Consultancy  
Intelligent Transport Systems

Atkins Highways and Transportation
Woodcote Grove, Ashley Road, Epsom, Surrey, KT18 5BW

Tel: +44 (0) 1372 756407 
Fax: +44 (0) 1372 740055
Mob: 07740 817586 
E-mail: [hidden email]

www.atkinsglobal.com/its

This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.

The ultimate parent company of the Atkins Group is WS Atkins plc.  Registered in England No. 1885586.  Registered Office Woodcote Grove, Ashley Road, Epsom, Surrey KT18 5BW.

P Consider the environment. Please don't print this e-mail unless you really need to.

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Richard,

 > I'm return a PDF document from Orbeon forms and when I use it with
 > MS Internet Explorer I get the yellow security strip asking if I
 > want to download the file.
 >
 > When I select 'Download file' the page refreshes and nothing happens
 > except that I lose all of my form state information - my
 > xforms:output areas are now blank. I have to fill in my form and
 > obtain the results again and select PDF print to get my printout.
 >
 > I'm outputing my PDF as an attachment. I've tried uisng inline and
 > it's a bit better, but I prefer the attachment mechanism.
 >
 > With Firefox everything is OK.
 >
 > Any suggestions on what I can do.
 >
 > BTW - I have secured by pages using acegi but I don't think that is
 > creating this effect.

Do you observe the same thing if you try to get a PDF from here:

   http://www.orbeon.com/ops/forms/

 > Also there seems to be a very long delay downloading my PDF once it
 > has been generated. In Firefox I get the download popup relatively
 > quickly but when it then starts to perform the download there is a
 > long delay.  Is this a known issue ? I was under the impression that
 > as soon as the download popup appears it means that the PDF has been
 > created on the server.

That may be although I can't be positive about it. Are you using
oxf:pdf-template, or oxf:xslfo-converter/oxf:xslfo-serializer?

-Erik

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

When I use the link you have provided I get exactly the same functionality.

I changed the drop down list to show G-325A and the pressed View PDF. I get the yellow security bar and select 'Download file'. The page refreshes and is now showing DMV-14 again. If I repeat the process without refreshing the browser then I get the PDF.


Richard Shaw

¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤

Richard Shaw  
Technical Design Authority - Information Solutions Consultancy  
Intelligent Transport Systems

Atkins Highways and Transportation
Woodcote Grove, Ashley Road, Epsom, Surrey, KT18 5BW

Tel: +44 (0) 1372 756407
Fax: +44 (0) 1372 740055
Mob: 07740 817586
E-mail: [hidden email]

www.atkinsglobal.com/its

-----Original Message-----
From: Erik Bruchez [mailto:[hidden email]] On Behalf Of Erik Bruchez
Sent: 04 July 2007 21:39
To: [hidden email]
Subject: Re: [ops-users] PDF IE security

Richard,

 > I'm return a PDF document from Orbeon forms and when I use it with  > MS Internet Explorer I get the yellow security strip asking if I  > want to download the file.
 >
 > When I select 'Download file' the page refreshes and nothing happens  > except that I lose all of my form state information - my  > xforms:output areas are now blank. I have to fill in my form and  > obtain the results again and select PDF print to get my printout.
 >
 > I'm outputing my PDF as an attachment. I've tried uisng inline and  > it's a bit better, but I prefer the attachment mechanism.
 >
 > With Firefox everything is OK.
 >
 > Any suggestions on what I can do.
 >
 > BTW - I have secured by pages using acegi but I don't think that is  > creating this effect.

Do you observe the same thing if you try to get a PDF from here:

   http://www.orbeon.com/ops/forms/

 > Also there seems to be a very long delay downloading my PDF once it  > has been generated. In Firefox I get the download popup relatively  > quickly but when it then starts to perform the download there is a  > long delay.  Is this a known issue ? I was under the impression that  > as soon as the download popup appears it means that the PDF has been  > created on the server.

That may be although I can't be positive about it. Are you using oxf:pdf-template, or oxf:xslfo-converter/oxf:xslfo-serializer?

-Erik

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/




This message has been scanned for viruses by MailControl - (see http://bluepages.wsatkins.co.uk/?6875772)


This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.

The ultimate parent company of the Atkins Group is WS Atkins plc.  Registered in England No. 1885586.  Registered Office Woodcote Grove, Ashley Road, Epsom, Surrey KT18 5BW.

Consider the environment. Please don't print this e-mail unless you really need to.



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Richard,

Mmmh, I just tried this with IE 6 and IE 7 and in both cases, the PDF
displays within the browser window, and without errors.

Do you have an anti virus or other software installed? What happens on
another machine?

-Erik

Shaw, Richard A wrote:
 > When I use the link you have provided I get exactly the same
functionality.
 >
 > I changed the drop down list to show G-325A and the pressed View
 > PDF. I get the yellow security bar and select 'Download file'. The
 > page refreshes and is now showing DMV-14 again. If I repeat the
 > process without refreshing the browser then I get the PDF.
 >
 >
 > Richard Shaw
 >
 > ¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤
 >
 > Richard Shaw
 > Technical Design Authority - Information Solutions Consultancy
 > Intelligent Transport Systems
 >
 > Atkins Highways and Transportation
 > Woodcote Grove, Ashley Road, Epsom, Surrey, KT18 5BW
 >
 > Tel: +44 (0) 1372 756407
 > Fax: +44 (0) 1372 740055
 > Mob: 07740 817586
 > E-mail: [hidden email]
 >
 > www.atkinsglobal.com/its
 >
 > -----Original Message-----
 > From: Erik Bruchez [mailto:[hidden email]] On Behalf Of Erik Bruchez
 > Sent: 04 July 2007 21:39
 > To: [hidden email]
 > Subject: Re: [ops-users] PDF IE security
 >
 > Richard,
 >
 >  > I'm return a PDF document from Orbeon forms and when I use it with
  > MS Internet Explorer I get the yellow security strip asking if I  >
want to download the file.
 >  >
 >  > When I select 'Download file' the page refreshes and nothing
happens  > except that I lose all of my form state information - my  >
xforms:output areas are now blank. I have to fill in my form and  >
obtain the results again and select PDF print to get my printout.
 >  >
 >  > I'm outputing my PDF as an attachment. I've tried uisng inline and
  > it's a bit better, but I prefer the attachment mechanism.
 >  >
 >  > With Firefox everything is OK.
 >  >
 >  > Any suggestions on what I can do.
 >  >
 >  > BTW - I have secured by pages using acegi but I don't think that
is  > creating this effect.
 >
 > Do you observe the same thing if you try to get a PDF from here:
 >
 >    http://www.orbeon.com/ops/forms/
 >
 >  > Also there seems to be a very long delay downloading my PDF once
it  > has been generated. In Firefox I get the download popup relatively
  > quickly but when it then starts to perform the download there is a
 > long delay.  Is this a known issue ? I was under the impression that
  > as soon as the download popup appears it means that the PDF has been
  > created on the server.
 >
 > That may be although I can't be positive about it. Are you using
oxf:pdf-template, or oxf:xslfo-converter/oxf:xslfo-serializer?
 >
 > -Erik
 >
 > --
 > Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/
 >
 >
 >
 >
 > This message has been scanned for viruses by MailControl - (see
http://bluepages.wsatkins.co.uk/?6875772)
 >
 >
 > This email and any attached files are confidential and copyright
protected. If you are not the addressee, any dissemination of this
communication is strictly prohibited. Unless otherwise expressly agreed
in writing, nothing stated in this communication shall be legally binding.
 >
 > The ultimate parent company of the Atkins Group is WS Atkins plc.
Registered in England No. 1885586.  Registered Office Woodcote Grove,
Ashley Road, Epsom, Surrey KT18 5BW.
 >
 > Consider the environment. Please don't print this e-mail unless you
really need to.
 >
 >


--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Richard,

On 7/5/07, Shaw, Richard A <[hidden email]> wrote:
> When I use the link you have provided I get exactly the same functionality.
>
> I changed the drop down list to show G-325A and the pressed View PDF. I get the yellow security bar and select 'Download file'. The page refreshes and is now showing DMV-14 again. If I repeat the process without refreshing the browser then I get the PDF.

I have seen this problem in other applications as well, so I will
check if I can reproduce this. Are you seeing this with IE7 only, or
is this also happening with IE6?

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

It is happening on IE6 on my secure work machine. It is fine on my IE7 box as home.
 
Unfortunately I can't check my security settings because they are hidden by the security settings :-)
 
What I didn't mention before was that if I change the PDF delivery from inline to attachment then I get the same functionality on all machines. I would prefer the attachment option because I'm worried about novice users having to use the browsers back button to get back to the form page once the inline PDF is in the window.
 
Richard

________________________________

From: [hidden email] on behalf of Alessandro Vernet
Sent: Fri 06/07/2007 03:27
To: [hidden email]
Subject: Re: [ops-users] PDF IE security



Richard,

On 7/5/07, Shaw, Richard A <[hidden email]> wrote:
> When I use the link you have provided I get exactly the same functionality.
>
> I changed the drop down list to show G-325A and the pressed View PDF. I get the yellow security bar and select 'Download file'. The page refreshes and is now showing DMV-14 again. If I repeat the process without refreshing the browser then I get the PDF.

I have seen this problem in other applications as well, so I will
check if I can reproduce this. Are you seeing this with IE7 only, or
is this also happening with IE6?

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
http://www.orbeon.com/



This message has been scanned for viruses by MailControl - (see http://bluepages.wsatkins.co.uk/?6875772)




This email and any attached files are confidential and copyright protected. If you are not the addressee, any dissemination of this communication is strictly prohibited. Unless otherwise expressly agreed in writing, nothing stated in this communication shall be legally binding.

The ultimate parent company of the Atkins Group is WS Atkins plc.  Registered in England No. 1885586.  Registered Office Woodcote Grove, Ashley Road, Epsom, Surrey KT18 5BW.

Consider the environment. Please don't print this e-mail unless you really need to.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Shaw, Richard A a écrit :
> It is happening on IE6 on my secure work machine. It is fine on my IE7 box as home.
>  
> Unfortunately I can't check my security settings because they are hidden by the security settings :-)
>  
> What I didn't mention before was that if I change the PDF delivery from inline to attachment then I get the same functionality on all machines. I would prefer the attachment option because I'm worried about novice users having to use the browsers back button to get back to the form page once the inline PDF is in the window.
>  
> Richard
>  

Richard, you can also open the inline PDF in a new window with
xforms:load and xxforms:target="_blank".

HTH,

Marc



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Richard,

On 7/6/07, Shaw, Richard A <[hidden email]> wrote:
> It is happening on IE6 on my secure work machine. It is fine on my IE7 box as home.
>
> Unfortunately I can't check my security settings because they are hidden by the security settings :-)
>
> What I didn't mention before was that if I change the PDF delivery from inline to attachment then I get the same functionality on all machines. I would prefer the attachment option because I'm worried about novice users having to use the browsers back button to get back to the form page once the inline PDF is in the window.

I was indeed able to reproduce this. I haven't found yet a way to get
around this limitation in IE, and for now I added this bug:

http://forge.objectweb.org/tracker/index.php?func=detail&aid=307262&group_id=168&atid=350207

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

On 7/8/07, Alessandro Vernet <[hidden email]> wrote:
> I was indeed able to reproduce this. I haven't found yet a way to get
> around this limitation in IE, and for now I added this bug: [...]

A quick update on this: I did some further investigation and haven't
found a way to get around this limitation in IE. You can change your
IE preferences to get around the "yellow bar", but there isn't
anything we can do programmatically.

However, we are planning to enhance the triggers that are displayed as
links, so when the links just runs an xforms:load, that link can in
fact be just an HTML link with an href, instead of a link that runs
JavaScript. With this in place, you will be able to get around this
problem in IE by using a link to point to the file.

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws