Announcement Announcement Module
Collapse

Spring Modules forum decommissioned in favor of Spring Extensions

As the Spring Modules project has been replaced by the Spring Extensions (http://www.springsource.org/extensions) project, this forum has been decommissioned in favour of Spring Extensions one at:
http://forum.springsource.org/forumdisplay.php?f=44

Please see the Spring Extensions home page for a complete list of current projects in Java, .NET and ActionScript. You can also propose one if you want.

Cheers,
Costin Leau
SpringSource - http://www.SpringSource.com- Spring Training, Consulting, and Support - "From the Source"
http://twitter.com/costinl
See more
See less
XT AJAX document.URL Page Title Module
Move Remove Collapse
X
Conversation Detail Module
Collapse
  • Filter
  • Time
  • Show
Clear All
new posts

  • XT AJAX document.URL

    HI,
    why the request URL must be the document.URL?
    Last edited by liulei; Sep 24th, 2007, 02:35 AM.

  • #2
    Originally posted by liulei View Post
    why the request URL must be the document.URL?
    That's because of two reasons:

    1. Security

    Ajax handlers are partitioned per URL.
    If an handler is configured at a given protected URL, I don't want a malicious user to access that handler from another (non protected) URL through some kind of javascript injection.

    2. Simplicity

    IMHO it would be a real mess to allow Ajax calls to all handlers in your web application.

    Cheers,

    Sergio B.

    Comment


    • #3
      But this will bring some trouble:

      1. When request a page , it must go through a controller, even if the page is a simple static pages.

      2.when there are many forms in a page, I want to use form.action.

      Comment


      • #4
        Originally posted by liulei View Post
        1. When request a page , it must go through a controller, even if the page is a simple static pages.
        It is not true.
        Ajax actions (those fired with XT.doAjaxAction(...)) don't go through controllers.

        Originally posted by liulei View Post
        2.when there are many forms in a page, I want to use form.action.
        Good point.
        Please open a Jira issue about that: I'll consider how to solve it in future versions.

        Thanks,
        Cheers,

        Sergio B.

        Comment


        • #5
          It is not true.
          Ajax actions (those fired with XT.doAjaxAction(...)) don't go through controllers.

          Sbtourist misunderstood what I meant. I do not mean that the XT.doAjaxAction (...) request, but the request includes a XT.doAjaxAction (...) pages go through controllers,for example FullPathUrlFilenameViewController。

          Comment

          Working...
          X