[jira] Updated: (SHINDIG-1409) Security updates to RPC

["Ziv Horesh (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SHINDIG-1409?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Ziv Horesh updated SHINDIG-1409:
--------------------------------

    Comment: was deleted

(was: I am trying to sync with the latest shindig head and I start to get rpc
failures - rpc call from gadget to container doesn't pass through on firefox
(work fine on chrome.
Javier can you help verify?

The gadget is simple:
<Module>
<ModulePrefs title="na">
<Require feature="rpc"/>
</ModulePrefs>
<Content type="html">
    <script>
      function call() {
        gadgets.rpc.call(null, 'foo', null, 'bar');
      }
    </script>
    <button id="button" onClick="call()">click</button>

</Content>
</Module>

And in the container I add the code (I have simple console div):

gadgets.rpc.setRelayUrl('gadget', '
http://meron.mtv.corp.google.com:8080/gadgets/files/container/rpc_relay.html');

gadgets.rpc.setAuthToken('gadget', '6421089622916860021');
gadgets.rpc.register('foo', function() { setConsoleWithService('foo',
arguments); });gadgets.rpc.registerDefault(function() {
setConsoleWithService('default', arguments); });

When I debug it in firebug I get a null targetWin (window.parent) which I
assume is the real problem.

Thanks in advance

Ziv





)

> Security updates to RPC
> -----------------------
>
>                 Key: SHINDIG-1409
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-1409
>             Project: Shindig
>          Issue Type: Improvement
>          Components: Javascript 
>    Affects Versions: 2.0.0
>            Reporter: Javier Pedemonte
>            Priority: Minor
>             Fix For: 2.0.0
>
>
> Add security features to the RPC layer, as described here:
> http://wiki.opensocial.org/index.php?title=PubSub.next_Proposals#Secure_rpc.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.