Showcase CSRF vulnerability

2014-10-20 Thread Martin Schneider
We use the tapestry-csrf-protection module to protect our application against CSRF attacks. To increase security awareness in our team I want to showcase, that without such a protection our application would in fact be vulnerable to this kind of attack. The idea is to have a prepared HTML page, wh

Re: Trigger custom JS events and handle them on the server side

2014-09-02 Thread Martin Schneider
Hi François, Thanks! I will have a look. Martin On Mon, Sep 1, 2014 at 7:27 PM, françois facon wrote: > Hi Martin, > > please have a look at the branch 5.4. > > https://github.com/got5/tapestry5-jquery/commit/a979f03a1feedb40a2fd1fbeb410f197d5e7bcf2 > . > > Regards > François >

Re: Trigger custom JS events and handle them on the server side

2014-08-30 Thread Martin Schneider
The got5-mixin is not supported for 5.4 and the way java script support has changed since 5.3 I am not sure this is the right way to go. Maybe someone can tell me, if the mixin can be modified for Tapestry 5.4: https://github.com/got5/tapestry5-jquery/blob/5dee73c32c2d584decc76231a905d26c01c02eb3/s

Trigger custom JS events and handle them on the server side

2014-08-30 Thread Martin Schneider
What is the best way to do this with Tapestry 5.4? The jQuery bind mixin seems to have done this for Tapestry 5.3 ( http://tapestry5-jquery.com/mixins/docsbind). Basically, what I'm trying to achieve is, to allow palette components to behave like the select components in this example: http://jumps