XmlHttpRequest (XHR) and HTTP Redirects (testcase)

This is results of XHR behaviour in IE and Chrome regarding redirects. Enjoy.

Credits: dojo@gratex.com

Life Behind Proxy - gradle

today, brought another challenge, making gradlew/gradle working from behind corporate proxy. Solution/Failure article comming soon I hope. Update: 23:11 I gave up, proxy scanning makes all unusable, instead of configuring proxy changing repository URL to local nexus.

sed -i "s;repo.springsource.org/libs-milestone;nexushost/nexus/content/groups/public;" build.gradle

TODO: some "global" remapping line in .m2 ? without touching each build.gradle ?

webmessaging, postMessage and naive properties access

Sometimes I tend to put debug codes to dump method arguments. My favorite construction is

console.debug("dumpEvent:", evt); 

instead of often seen:

console.debug("dumpEvent:"+evt);

However, using this code is not a good idea with cross domain integration code:

win.global.addEventListener("message", dumpEvent);
function dumpEvent(evt) {
 // this will raise some errors in console
 // Blocked a frame with origin "http://a" from accessing 
 // a frame with origin "http://b". 
 // Protocols, domains, and ports must match.
 console.debug("dumpEvent", evt); // not a good idea
}

win.global.addEventListener("message", dumpEventProperties);
function dumpEventProperties(evt) {
 // this shall work, dump only properies specified in: 
 // http://www.w3.org/TR/webmessaging/
 console.debug("dumpEvent", {
  data : evt.data,
  origin : evt.origin,
  lastEventId : evt.lastEventId,
  //source : evt.source, //and this is the cause of problem ;-)
  ports : evt.ports
 });
}

So be aware, sometimes your logging statements can produce errors as well ;-)

dojo/request api picture

some bamboo paper and dojo docs fun :-)))

Good book: The Tangled Web: A Guide to Securing Modern Web Applications

http://lcamtuf.coredump.cx/tangled/

Style is different (less details and i miss concrete proofs, tests, tables from original material (). Excellent. Thanx for nice (night) reading.

RQL - resource query language - playground

Friends of mine have created an experimental playground for RQL - Resource Query Language. You can enter the source JSON, query (in RQL) and also create own operators. It contain some predefined samples with associated predefined queries. Shall live here: http://rql-engine.eu01.aws.af.cm/ and here are some screenshots:

a list apart (1st april joke ?)

all titles cropped ? on all my OSX browsers ? April joke ?