开发者

GWT RequestBuilder POST and XSS

I'm using GWT 2.1.1 and in my app there is a RequestBuilder/POST that fails (cross site scripting XSS). The main cause is the different urls for client and server:

client in dev-mode: http://127.0.0.1:8888/index.html?gwt.codesvr=127.0.0.1:9997#...

server jetty: http://localhost:8080/myapp/

so the browser (firefox in my case) "stops" the incoming post-request.

Is there a workaround (at least for de开发者_Go百科velopment) to continue using gwt in dev mode? I tried the proxy config:

http://code.google.com/p/google-web-toolkit/issues/detail?id=3131#c46

but nothing seems to happen :(

any idea?

Thanks, Julio

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜