Skip navigation.

exploreopera

| Help

Sign up | Help

Java's setRequestProperty supported, with a caveat

,

Just a morsel of technical documentation..

Opera's Java implementation will now support HTTPUrlConnection.setRequestProperty but for security reasons (to prevent so called "request smuggling attacks") it will not permit sending several headers. These headers include "Host", "Content-length" and "Transfer-Encoding".

This is the same security policy we apply to the XMLHttpRequest object and I believe the Flash plugin does the same thing for its ActionScript implementation.

key eventsGoogle maps and event transparency

Comments

avatar
Since you don't permit the sending of host headers, is Opera totally against HTTP 1.1 when requests are sent in these contexts?

By scottj, # 20. April 2006, 14:39:29

avatar
No. To clarify: these headers are added as required but by Opera itself. A Java applet or XMLHttpRequest script may not modify these values.

By hallvors, # 30. April 2006, 14:00:29

Write a comment

You must be logged in to write a comment. if you're not a registered member, please sign up.