Dynamic height with content type="url"

[Arun Kumar <ar...@gmail.com>]

In gadget xml file, I use <content type="url" href="xxxx.html" />

In this case, how can I use dynamic-height feature?

Re: Dynamic height with content type="url"

[Kevin Brown <et...@google.com>]

On Feb 7, 2008 1:08 PM, Cassie <do...@apache.org> wrote:

> Arun -
>
> I *think* Kevin was referring to the last part of this thread:
>
> http://mail-archives.apache.org/mod_mbox/incubator-shindig-dev/200802.mbox/browser
>
> I always get confused by the ifpc stuff :), but the main idea I gathered
> from that is that the gadget is no longer on a domain that we trust and
> control (because it is just whatever url the gadget specified). This means
> that we can't use the current solution for ifpc, where the whole parent
> page
> creates an iframe in the same domain as the gadget iframe and vice versa,
> because the parent page would have to create an iframe in the same domain
> as
> that random site. I believe that the ifpc_relay.html would also be a
> problem
> because we would have to trust that the gadget's site has the correct file
> up in the right place.


Sort of;  the issue is actually that the gadget can't trust the container.
There are other problems with out type=url support though, such as not being
able to handle inline or http-fetched javascript from features.

(I also gathered that we could eventually fix this though, it just wasn't
> trivial)


The latter problem can be, the former not so much. We'll have to standardize
some sort of white listing mechanism for the gadget authors so that they can
decide which parent containers that they trust to fetch javascript from.
Gadgets that don't need any container provided javascript (no user prefs, no
dynamic height or settitle support, no opensocial...) will work just fine,
but all the others won't.

~Kevin

Re: Dynamic height with content type="url"

[Cassie <do...@apache.org>]

Arun -

I *think* Kevin was referring to the last part of this thread:
http://mail-archives.apache.org/mod_mbox/incubator-shindig-dev/200802.mbox/browser

I always get confused by the ifpc stuff :), but the main idea I gathered
from that is that the gadget is no longer on a domain that we trust and
control (because it is just whatever url the gadget specified). This means
that we can't use the current solution for ifpc, where the whole parent page
creates an iframe in the same domain as the gadget iframe and vice versa,
because the parent page would have to create an iframe in the same domain as
that random site. I believe that the ifpc_relay.html would also be a problem
because we would have to trust that the gadget's site has the correct file
up in the right place.

(I also gathered that we could eventually fix this though, it just wasn't
trivial)

Let us know if i screwed up that explanation or if neither Kevin's thread
nor my response makes sense.

- Cassie


On Mon, Feb 4, 2008 at 10:20 PM, Arun Kumar <ar...@gmail.com>
wrote:

> Can you please give me a link to the messages related to this on archive?
>
> On Feb 4, 2008 11:36 PM, Kevin Brown <et...@google.com> wrote:
>
> > type=url support is completely broken for anything that requires ifpc at
> > present (including dynamic-height). See the archives of this mailing
> list
> > for the gritty details.
> >
> > On Feb 4, 2008 2:49 AM, Arun Kumar <ar...@gmail.com>
> > wrote:
> >
> > > In gadget xml file, I use <content type="url" href="xxxx.html" />
> > >
> > > In this case, how can I use dynamic-height feature?
> > >
> >
>

Re: Dynamic height with content type="url"

[Arun Kumar <ar...@gmail.com>]

Can you please give me a link to the messages related to this on archive?

On Feb 4, 2008 11:36 PM, Kevin Brown <et...@google.com> wrote:

> type=url support is completely broken for anything that requires ifpc at
> present (including dynamic-height). See the archives of this mailing list
> for the gritty details.
>
> On Feb 4, 2008 2:49 AM, Arun Kumar <ar...@gmail.com>
> wrote:
>
> > In gadget xml file, I use <content type="url" href="xxxx.html" />
> >
> > In this case, how can I use dynamic-height feature?
> >
>

Re: Dynamic height with content type="url"

[Kevin Brown <et...@google.com>]

type=url support is completely broken for anything that requires ifpc at
present (including dynamic-height). See the archives of this mailing list
for the gritty details.

On Feb 4, 2008 2:49 AM, Arun Kumar <ar...@gmail.com> wrote:

> In gadget xml file, I use <content type="url" href="xxxx.html" />
>
> In this case, how can I use dynamic-height feature?
>