Wednesday, October 11, 2023

Reg: Service URL manipulation in the request payload

Hello Team,

I've a question on GWT RPC request payload. We know that request payload has service URL along with other data pertains to the remote method.

the testing team is using burb tool to manipulate the payload and giving a different URL like instead of www.mydomain.com, if we give 'www.google.com'.

1. Would the request be routed to google.com DNS server since the payload has ? 
2. Does GWT RPC make any DNS call to this manipulated URL while processing the request from client ?
3. With manipulated URL in the payload,  Does the request still reach the actual/original endpoint of the service (remote servlet) ?

To my knowledge, the URL in the request payload is not used for invoking the remote method, it is just for reference purpose only.

Kindly let me know how the url in the payload used while processing the client request.

Request Payload:
  1. 7|0|8|http://www.mydomain.com:10085/sp/chigo/|E5CFE27DD53BDBE4521FDBFC1A038618|com.google.gwt.logging.shared.RemoteLoggingService|logOnServer|java.util.logging.LogRecord/2492345967|INFO|Taking 45 milliseconds to layout 3932|com.mydomain.gwt.client.Layout|1|2|3|4|1|5|5|6|7|8|V1kCRyY|0|


Note: remote method exposed using RemoteServiceServlet. Request mapping done in web.xml.

Thanks
Jhonson

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/007e34c6-b678-4d4a-b14e-79e0b5dda1e4n%40googlegroups.com.

No comments:

Post a Comment