Re: Securing URL Parameters

2006-12-07 Thread Dennis Sinelnikov
Damian Krzeminski wrote: Dennis Sinelnikov wrote: Dear Fellow Tapestriers :), I need to implement an EngineService that will return a specific file living on a filesystem. I need to pass a parameter in the url that specifies which file to return. I've searched the tapestry list serve archi

Re: Securing URL Parameters

2006-12-07 Thread Damian Krzeminski
Dennis Sinelnikov wrote: Dear Fellow Tapestriers :), I need to implement an EngineService that will return a specific file living on a filesystem. I need to pass a parameter in the url that specifies which file to return. I've searched the tapestry list serve archives for an elegant solutio

Re: Securing URL Parameters

2006-12-06 Thread Sam Gendler
I don't usually send the filename hashed. I merely include a hash of the parameter that was created with a secret seed. At the other end, I can determine if the payload was messed with by seeing if the parameters match the hash of the params. This makes life a lot easier to debug, is pretty sec

Securing URL Parameters

2006-12-06 Thread Dennis Sinelnikov
Dear Fellow Tapestriers :), I need to implement an EngineService that will return a specific file living on a filesystem. I need to pass a parameter in the url that specifies which file to return. I've searched the tapestry list serve archives for an elegant solution, but nothing really caug