Orbeon Forms community mailing list

outputAjaxResponse Encryption of State Changes

Classic

List

Threaded

4 messages Options

ydesilva

Jan 27, 2011; 7:58am

outputAjaxResponse Encryption of State Changes

Hi Guys,

I am trying to understand the outputAjaxResponse method in XFormsServer. I want to know why the XML response has to be encrypted? I don't see it possible to switch of Encryption of these responses, like that of fields. Am I correct?

Is there someway to switch off encryption?

Yev

Erik Bruchez

Jan 27, 2011; 7:16pm

Re: outputAjaxResponse Encryption of State Changes

Administrator

Yev,

Ajax responses are not encrypted. Where do you see that?

We do encrypt:

* select/select1 item values

* static/dynamic state information when using client state mode (which shouldn't be used)

-Erik

On Wed, Jan 26, 2011 at 11:58 PM, ydesilva <[hidden email]> wrote:

Hi Guys,

I am trying to understand the outputAjaxResponse method in XFormsServer. I
want to know why the XML response has to be encrypted? I don't see it
possible to switch of Encryption of these responses, like that of fields. Am
I correct?

Is there someway to switch off encryption?

Yev
--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/outputAjaxResponse-Encryption-of-State-Changes-tp3241602p3241602.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

... [show rest of quote]

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

ydesilva

Jan 27, 2011; 11:41pm

Re: outputAjaxResponse Encryption of State Changes

In reply to this post by ydesilva

In the encodeBytes method in XFormsUtil. outputAjaxResponse calls encodeXML, which calls encodeBytes.

I might be wrong in my understanding of what is happening.

Erik Bruchez

Jan 28, 2011; 1:13am

Re: Re: outputAjaxResponse Encryption of State Changes

Administrator

Events which we call "server events" are encrypted. These events are events that the server asks the client to send back at a later point in time, like in 2-pass submissions or uploads. They are encrypted as they are used for internal purposes and so that somebody cannot maliciously tamper with them.

-Erik

On Thu, Jan 27, 2011 at 3:41 PM, ydesilva <[hidden email]> wrote:

In the encodeBytes method in XFormsUtil. outputAjaxResponse calls encodeXML,
which calls encodeBytes.

I might be wrong in my understanding of what is happening.
--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/outputAjaxResponse-Encryption-of-State-Changes-tp3241602p3243456.html

Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws

... [show rest of quote]