Orbeon Forms community mailing list

outputAjaxResponse Encryption of State Changes

classic Classic list List threaded Threaded
♦
♦
 4 messages Options
ydesilva
Reply | Threaded
Open this post in threaded view
♦
♦
|

outputAjaxResponse Encryption of State Changes

ydesilva
Hi Guys,

I am trying to understand the outputAjaxResponse method in XFormsServer. I want to know why the XML response has to be encrypted? I don't see it possible to switch of Encryption of these responses, like that of fields. Am I correct?

Is there someway to switch off encryption?

Yev
Erik Bruchez
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: outputAjaxResponse Encryption of State Changes

Erik Bruchez
Administrator
Yev,

Ajax responses are not encrypted. Where do you see that?

We do encrypt:

* select/select1 item values
* static/dynamic state information when using client state mode (which shouldn't be used)

-Erik

On Wed, Jan 26, 2011 at 11:58 PM, ydesilva <[hidden email]> wrote:

Hi Guys,

I am trying to understand the outputAjaxResponse method in XFormsServer. I
want to know why the XML response has to be encrypted? I don't see it
possible to switch of Encryption of these responses, like that of fields. Am
I correct?

Is there someway to switch off encryption?

Yev
--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/outputAjaxResponse-Encryption-of-State-Changes-tp3241602p3241602.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
ydesilva
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: outputAjaxResponse Encryption of State Changes

ydesilva
In reply to this post by ydesilva
In the encodeBytes method in XFormsUtil. outputAjaxResponse calls encodeXML, which calls encodeBytes.

I might be wrong in my understanding of what is happening.
Erik Bruchez
Reply | Threaded
Open this post in threaded view
♦
♦
|

Re: Re: outputAjaxResponse Encryption of State Changes

Erik Bruchez
Administrator
Events which we call "server events" are encrypted. These events are events that the server asks the client to send back at a later point in time, like in 2-pass submissions or uploads. They are encrypted as they are used for internal purposes and so that somebody cannot maliciously tamper with them.

-Erik

On Thu, Jan 27, 2011 at 3:41 PM, ydesilva <[hidden email]> wrote:

In the encodeBytes method in XFormsUtil. outputAjaxResponse calls encodeXML,
which calls encodeBytes.

I might be wrong in my understanding of what is happening.
--
View this message in context: http://orbeon-forms-ops-users.24843.n4.nabble.com/outputAjaxResponse-Encryption-of-State-Changes-tp3241602p3243456.html
Sent from the Orbeon Forms (ops-users) mailing list archive at Nabble.com.


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Free forum by Nabble Edit this page