Life Behind Proxy - gradle

today, brought another challenge, making gradlew/gradle working from behind corporate proxy. Solution/Failure article comming soon I hope. Update: 23:11 I gave up, proxy scanning makes all unusable, instead of configuring proxy changing repository URL to local nexus.

sed -i "s;repo.springsource.org/libs-milestone;nexushost/nexus/content/groups/public;" build.gradle

TODO: some "global" remapping line in .m2 ? without touching each build.gradle ?

webmessaging, postMessage and naive properties access

Sometimes I tend to put debug codes to dump method arguments. My favorite construction is

console.debug("dumpEvent:", evt); 

instead of often seen:

console.debug("dumpEvent:"+evt);

However, using this code is not a good idea with cross domain integration code:

win.global.addEventListener("message", dumpEvent);
function dumpEvent(evt) {
 // this will raise some errors in console
 // Blocked a frame with origin "http://a" from accessing 
 // a frame with origin "http://b". 
 // Protocols, domains, and ports must match.
 console.debug("dumpEvent", evt); // not a good idea
}

win.global.addEventListener("message", dumpEventProperties);
function dumpEventProperties(evt) {
 // this shall work, dump only properies specified in: 
 // http://www.w3.org/TR/webmessaging/
 console.debug("dumpEvent", {
  data : evt.data,
  origin : evt.origin,
  lastEventId : evt.lastEventId,
  //source : evt.source, //and this is the cause of problem ;-)
  ports : evt.ports
 });
}

So be aware, sometimes your logging statements can produce errors as well ;-)

dojo/request api picture

some bamboo paper and dojo docs fun :-)))

Good book: The Tangled Web: A Guide to Securing Modern Web Applications

http://lcamtuf.coredump.cx/tangled/

Style is different (less details and i miss concrete proofs, tests, tables from original material (). Excellent. Thanx for nice (night) reading.

RQL - resource query language - playground

Friends of mine have created an experimental playground for RQL - Resource Query Language. You can enter the source JSON, query (in RQL) and also create own operators. It contain some predefined samples with associated predefined queries. Shall live here: http://rql-engine.eu01.aws.af.cm/ and here are some screenshots:

a list apart (1st april joke ?)

all titles cropped ? on all my OSX browsers ? April joke ?

Getting Started with OAuth 2.0

im sorry to say that, orailly is usually a good book publisher but Getting Started with OAuth 2.0 is imho one really bad book . no added value when compared to original specification. about the same size of pages. just changed ascii art diagrams to ugly graphics and added samples. really not good reading. if spent money already, skip to appendix directly and dont forget to read this as well http://hueniverse.com/2010/09/oauth-2-0-without-signatures-is-bad-for-the-web/