The way you defined the demarcation lines is uncommon for a GWT application. They don't usually (re)load the entry point as the user navigates within the application. Passing data from html page to html page via URL param is exposed publicly. SessionStorage is could be the way to go because the data is tied to the window although that makes it accessible to any url loaded into that window (easy to XSS).
Changing your architecture slightly would greatly increase your security.
Wrap your modules into a single combined module that will own the page document root. Use the new parent module to contain any session information you want to share among the submodules. Navigate from module to module via the parent wrapping the modules main panel. Done well, each submodule could manifest as a kind of portlet. Code split the parent to download the Megs of common libraries (GWT, GXT, etc) only once.
On Sat, Feb 9, 2013 at 10:18 AM, emurmur <emurphy@conceptuamath.com> wrote:
You can set values in localstorage in one page and they can be read in another, provided they are in the same domain. Localstorage is not secure, so do not write sensitive data into localstorage.
On Friday, February 8, 2013 3:50:39 AM UTC-8, Visruth CV wrote:Hai,--I have many gwt modules in my project. Each module has an entry point, html and css page. I want to go from one module from another module and I should also be able to pass values with it. Consider, the first module contains a login page and the second contains account page. After authentication, how can I go to the second module (with passing some details like user Id user name etc to the second module). Can anybody help me please...Thanks in advance.
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To post to this group, send email to google-web-toolkit@googlegroups.com.
Visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
-- A. Stevko
===========
"If everything seems under control, you're just not going fast enough." M. Andretti
You received this message because you are subscribed to the Google Groups "Google Web Toolkit" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To post to this group, send email to google-web-toolkit@googlegroups.com.
Visit this group at http://groups.google.com/group/google-web-toolkit?hl=en.
For more options, visit https://groups.google.com/groups/opt_out.
No comments:
Post a Comment