Tapestry 4.1 How to protect from "malicious" change on parameters?

2009-07-28 Thread Adriana B
Hi I have following issues on Tapestry 4.1.3, wonder if you can help me. While submitting the application to some security tests like - Modifying sp parameter on url generated by DirectLink - Removing "hidden" parameters under a form - Removing if_*** parameters under a form our application

Re: [T5.1] Avoiding "new"

2009-07-28 Thread xfile80303
Thanks guys... It looks like ApplicationState objects are treated differently than services... see the bottom of this page "Configuring SSOs": http://tapestry.apache.org/tapestry5.1/guide/appstate.html I've also walked through the Tapestry code, and there's no binding lookup for application st

Re: [T5.1] Avoiding "new"

2009-07-28 Thread Felix Gonschorek
maybe the service "ObjectLocator" will help you too - it creates objects and injects services into them, event if they are not services that are known to the registry via its "autobuild" method. xfile80303 schrieb: Thanks Thiago, Your insight, as always, is appreciated. Unfortunately there s

Re: [T5.1] Avoiding "new"

2009-07-28 Thread Olle Hallin
Have a look at the ApplicationStateManager. It is responsible for instantiating SessionStateObjects (aka ApplicationStateObjects), that can't be created with new. HTH, Olle 2009/7/29 xfile80303 > > Thanks Thiago, > > Your insight, as always, is appreciated. > > Unfortunately there seems to be

Re: [T5.1] Avoiding "new"

2009-07-28 Thread xfile80303
Thanks Thiago, Your insight, as always, is appreciated. Unfortunately there seems to be a snag... In my page I have this: @SessionState private User ssUser; In my Module I have this: public static void bind(ServiceBinder binder) { //...

Re: [T5.1] Avoiding "new"

2009-07-28 Thread Thiago H. de Paula Figueiredo
Hi! I guess you need a new service scope. Tapestry-IoC provides two out-of-the-box: singleton (default) and per-thread (one object created for each different thread). You can add a new lifecycle that always returns a new object. In Spring, this is called the prototype scope. http://tapest

Re: T5.1 CSS + URL not loading images

2009-07-28 Thread Thiago H. de Paula Figueiredo
Em Tue, 28 Jul 2009 18:07:01 -0300, Michael Gentry escreveu: I changed my BODY tag CSS to read: background: url(../images/foo.jpg) repeat-x left top; and it worked. No idea why that is needed, though. I guess why: when you use a *relative* path in CSS, it is relative to the CSS file,

[T5.1] Avoiding "new"

2009-07-28 Thread xfile80303
Hi all, I've some lack of understanding about Tapestry IOC and creating new objects. I understand the binding of service interfaces with service implementations and the injection of these services where needed, and this is a great tool. What I'm missing is a way to auto build or inject (or what

Re: T5.1 CSS + URL not loading images

2009-07-28 Thread Michael Gentry
I changed my BODY tag CSS to read: background: url(../images/foo.jpg) repeat-x left top; and it worked. No idea why that is needed, though. mrg On Tue, Jul 28, 2009 at 4:48 PM, Michael Gentry wrote: > I should've added that if I try accessing > http://localhost:/t51/assets/ctx/0.0.1-SNA

Re: T5.1 CSS + URL not loading images

2009-07-28 Thread Michael Gentry
I should've added that if I try accessing http://localhost:/t51/assets/ctx/0.0.1-SNAPSHOT/css/images/img01.jpg directly, I get: Unable to locate asset 'context:css/images/img01.jpg' (the file does not exist). Thanks again, mrg On Tue, Jul 28, 2009 at 4:46 PM, Michael Gentry wrote: > Hi all

T5.1 CSS + URL not loading images

2009-07-28 Thread Michael Gentry
Hi all, I'm just getting started with T5.1 (used T4 a while back).  I have a test application running at http://localhost:/t51 and I have a stylesheet which has as part of the BODY tag:   background: url(images/foo.jpg) repeat-x left top; When I load the page, the stylesheet is being loaded

Re: T5: Include Google Analytics Code

2009-07-28 Thread Thiago H. de Paula Figueiredo
Em Tue, 28 Jul 2009 11:45:10 -0300, Fernando Padilla escreveu: The google code doesn't HAVE to be the last thing on the page. It will work anywhere on the page. You can bring in the js file normally through tapestry's addScriptLink (or IncludeJavascript annotation), and then add the go

Re: T5: Include Google Analytics Code

2009-07-28 Thread Fernando Padilla
The google code doesn't HAVE to be the last thing on the page. It will work anywhere on the page. You can bring in the js file normally through tapestry's addScriptLink (or IncludeJavascript annotation), and then add the google code through addScript.. it would be something like below, but y

Re: T5: Include Google Analytics Code

2009-07-28 Thread Jérôme BERNARD
Eventually this might help. Add in your module class: public void contributeMarkupRenderer(OrderedConfiguration configuration, @Symbol(value = "tapestry.production-mode") boolean productionMode, @Path(value = "${tapes

Re: t5: locale and dispatcher

2009-07-28 Thread Angelo Chen
some additional info: it was registered in AppModule.java: public static void contributeMasterDispatcher(OrderedConfiguration configuration, @InjectService("LocaleDispatcher") Dispatcher localeDispatcher) { System.out.println("contributi

Re: T5: Include Google Analytics Code

2009-07-28 Thread moritzgilsdorf
I tried it but it still inserts the tapestry-code after the GA code and before the tag. Any other suggestions? Harald Geritzer wrote: > > > hello, > > i wrote some custom component for one of my projects. it's included just > before the closing body tag. > > > ... >

t5: locale and dispatcher

2009-07-28 Thread Angelo Chen
Hi, I have a dispatcher and I can see it was executed, in the dispatcher, I set the locale, this works in the 5.0.x, but now it does not work any more in 5.1.x, any idea? Thanks, Angelo public LocaleDispatcher(ThreadLocale locale, RequestGlobals requests) { this.locale = locale;

Re: T5: Include Google Analytics Code

2009-07-28 Thread Harald Geritzer
hello, i wrote some custom component for one of my projects. it's included just before the closing body tag. ... GoogleTracker.java == public class GoogleTracker { @Paramter private String trackerId;

Re: T5: Include Google Analytics Code

2009-07-28 Thread moritzgilsdorf
Thanks, but that didn't solved the problem. The Google Analytics instructions say that I have to insert the tracking code "...immediately before the tag of each page you are planning to track". So the problem is simply that Tapestry is inserting his Script as the last script before the tag. I

Re: Testify injection only works once per test

2009-07-28 Thread Paul Field
rolfst wrote on 27/07/2009 14:13:51: > Hi Paul, > > Yes there are three groups involved in the suite. > How ever no other test from other groups are available. > It seems that when I remove the reference to groups in my testng.xml it > works fine. > > For now a workable solution it looks like a

RE: How to use JavaScript for dependent selects?

2009-07-28 Thread De Saint Steban Emmanuel
There are a component on Internet which made this. Without coding any javascript. http://lombok.demon.co.uk/tapestry5Demo/ It's dynamic select. I use it, it work very well. Emmanuel -Message d'origine- De : "Max Weißböck (info)" [mailto:m...@weissboeck.info] Envoyé : lundi 27 juillet 20