leeseunguk / gwt-google-apis

Automatically exported from code.google.com/p/gwt-google-apis
0 stars 0 forks source link

More RPC documentation needed due to changes in GWT v2.1.1+ (for Gadget RPC) #443

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Found in Release: 2.1.1+

Platform information (OS, Browser, GWT version).  Does the issue exist on
other platforms? Not sure.

Details: RPC documentation needs to change due to 2.1.1. I put in the content 
type, but the character set that was coming from the gadget header inserted 
into spreadsheet was null. There was also a XSFR attack warning, and stopped 
there. Recommend adding more rpc documentation to help developers.

Workaround if you have one:
http://code.google.com/p/gwt-examples/source/browse/trunk/DemoGwtGadgetRpc/src/o
rg/gonevertical/gadgetrpc/server/RpcServiceImpl.java - working on rpc example 
source here
  /**
   * Do not validate HTTP headers - iGoogle munges them.
   *  application/x-www-form-urlencoded
   */
  @Override
  public String readContent(HttpServletRequest request) throws ServletException, IOException {
    String s = RPCServletUtils.readContent(request, "application/x-www-form-urlencoded", null);
    return s;
  }

  @Override
  protected void checkPermutationStrongName() throws SecurityException {
   // do nothing - skip this for now - XSFR block
  }

Links to the relevant Google Group posts:
http://gwt-examples.googlecode.com
http://demogwtgadgetrpc.appspot.com/demogwtgadgetrpc/GadgetRpc.gadget.xml - 
latest build

Original issue reported on code.google.com by branflak...@gmail.com on 3 Jan 2011 at 5:52

GoogleCodeExporter commented 9 years ago

Original comment by zundel@google.com on 28 Oct 2011 at 4:51

GoogleCodeExporter commented 9 years ago
Thanks, I'm adding this now to the sample:

http://gwt-code-reviews.appspot.com/1585804/

Original comment by zundel@google.com on 28 Oct 2011 at 8:42