miscoded

the web is a hack

Java's setRequestProperty supported, with a caveat

,

Just a morsel of technical documentation..

Opera's Java implementation will now support HTTPUrlConnection.setRequestProperty but for security reasons (to prevent so called "request smuggling attacks") it will not permit sending several headers. These headers include "Host", "Content-length" and "Transfer-Encoding".

This is the same security policy we apply to the XMLHttpRequest object and I believe the Flash plugin does the same thing for its ActionScript implementation.

key eventsGoogle maps and event transparency

Comments

Scottscottj Thursday, April 20, 2006 2:39:29 PM

Since you don't permit the sending of host headers, is Opera totally against HTTP 1.1 when requests are sent in these contexts?

Hallvord R. M. Steenhallvors Sunday, April 30, 2006 2:00:29 PM

No. To clarify: these headers are added as required but by Opera itself. A Java applet or XMLHttpRequest script may not modify these values.

Write a comment

You must be logged in to write a comment. If you're not a registered member, please sign up.