Re: CSP issues with UiBinder

After some discussion in gitter a few hours ago, we filed https://github.com/gwtproject/gwt/issues/9990 as a research topic to look more deeply into this within GWT itself.

It looks to me as though a separate StyleInjector implementation could be provided that no longer batches style tag creation, but instead inserts each individually. When the app is compiled, the hash for each block of CSS could be computed (...minus any runtime value interpolation), and a generated file made available to the server so that appropriate CSP headers can be set on http responses.

Creating many individual css files and loading them via <link> tags is an option too, but won't load synchronously that way, unless you hit them all at startup (which then would mean that you may load them unnecessarily).

Alternatively, a nonce could be specified and injected with each style tag - but that seems like a weaker approach in general, since it requires making the nonce available to the page's script code.

On Wednesday, July 31, 2024 at 8:26:57 PM UTC-5 ma...@craig-mitchell.com wrote:

There are multiple ways of using CSS in the UIBinder, I'm not sure which one uses injectStyleSheet behind the scenes.  Are you referring to using:

1. The <ui:style> tag in the ui.xml files.
2. Resources with CssResource and the <ui:with ...> tag in the ui.xml files.
3. Or are you programmatically injecting CSS in the code.

The obvious workaround would be to put your CSS in the main index.html file, and reference it from there, however, that might not be practical for your situation.

On Thursday 1 August 2024 at 1:42:16 am UTC+10 mighty...@gmail.com wrote:

Hello all. I am working to make our webapp compliant with our CSP, and have removed `style-src unsafe-inline`. I am working through any errors that have popped up, but one is stumping me

At runtime, it appears that GWT is injecting all the CSS from our Ui Binder files using StyleInjectorImpl `injectStyleSheet` method. 

This is violating the CSP. Is there any way around this? I'm aware that the main way to ensure CSP compliance is to use a nonce value, but due to some quirks with our setup, this is not possible. 

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/830b1bc0-0bc7-440f-a39f-c392a11abe1dn%40googlegroups.com.

Re: CSP issues with UiBinder

There are multiple ways of using CSS in the UIBinder, I'm not sure which one uses injectStyleSheet behind the scenes.  Are you referring to using:

1. The <ui:style> tag in the ui.xml files.
2. Resources with CssResource and the <ui:with ...> tag in the ui.xml files.
3. Or are you programmatically injecting CSS in the code.

The obvious workaround would be to put your CSS in the main index.html file, and reference it from there, however, that might not be practical for your situation.

On Thursday 1 August 2024 at 1:42:16 am UTC+10 mighty...@gmail.com wrote:

Hello all. I am working to make our webapp compliant with our CSP, and have removed `style-src unsafe-inline`. I am working through any errors that have popped up, but one is stumping me

At runtime, it appears that GWT is injecting all the CSS from our Ui Binder files using StyleInjectorImpl `injectStyleSheet` method. 

This is violating the CSP. Is there any way around this? I'm aware that the main way to ensure CSP compliance is to use a nonce value, but due to some quirks with our setup, this is not possible. 

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/1a28cca6-974c-4265-b018-af95dcf52c4en%40googlegroups.com.

CSP issues with UiBinder

Hello all. I am working to make our webapp compliant with our CSP, and have removed `style-src unsafe-inline`. I am working through any errors that have popped up, but one is stumping me

At runtime, it appears that GWT is injecting all the CSS from our Ui Binder files using StyleInjectorImpl `injectStyleSheet` method. 

This is violating the CSP. Is there any way around this? I'm aware that the main way to ensure CSP compliance is to use a nonce value, but due to some quirks with our setup, this is not possible. 

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/b4c2f50e-7bf9-4947-8000-f9dff600a837n%40googlegroups.com.

LastPass Tool Informations

Hi all.
I have updated GWT to version 3.6.8. I have not made any changes to the code, however I have noticed that in the combo boxes I see a link icon to the LastPass tool.
Where the LastPass icon now appears, there was previously an X icon that allowed the field to be deleted.

Can you tell me how I can disable the LastPass link and restore the X icon for deleting the field?
I am attaching some pre and post upgrade images

Thanks in advance.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/efb57ba6-5713-441c-92ef-b71c7af057aan%40googlegroups.com.

Re: Looking for a GWT expert for a porting of an application from an old version of GWT

I will be available full time from 1 september. But Colin or Frank are the real Gurus :-) I use both the Domino And Material Framework. I currently maintain for my own company several gwt app wich have total more than 1 milion line of statements.

Op woensdag 24 juli 2024 om 17:17:03 UTC+2 schreef Colin Alworth:

Hi Shaik,

I typically don't like to be seeming to advertise on the mailing list, but we're doing much of the active development work in GWT these days. Ahmad Bawaneh and I wrote many of the patches to get GWT itself ready to run on newer Java versions, including updating its own build so that we can produce the release artifacts, run samples and build docs, and run tests on Java 11-21 (there is a pending PR that will fix one test to run on Java 22 now).

Work that will need to be done will vary based on the project - some will need none at all except for updating Java and GWT, while others might need to switch to jakarta.servlet, or deal with other classloader or --add-opens issues.

We can join a project directly and make changes in collaboration with your team, or work "over your shoulder" and join screensharing calls and answer emails to keep us more at arms length as consultants who can provide examples and solutions to specific questions. We have a standard NDA, or we can review and sign your own NDA.

I'll send an email directly, and am happy to be contacted off-list for any support we can offer around GWT and its ecosystem.

Thanks,

Colin

On Wednesday, July 24, 2024 at 10:03:00 AM UTC-5 sfay...@gmail.com wrote:

 Subject: Re: Seeking GWT Specialist for Application Upgrade

Hi Colin,

I hope this email finds you well. I am writing on behalf of Shaik Fayaz, who is interested in your company's assistance with upgrading their GWT application.

Shaik Fayaz is in need of support to port their application from GWT 2.5.1 and Java 8.0 to the latest version of GWT and Java 17 or later. Your expertise in this area would be greatly appreciated.

Could you please provide more details on how your company can assist with this project? Shaik Fayaz is keen to arrange a call to discuss the requirements further. You can reach out to Shaik Fayaz at sfay...@gmail.com to coordinate a suitable time for the call.

Additionally, Shaik Fayaz is open to utilizing community resources like the Gitter channel and stackoverflow, as suggested by Frank. Any guidance on where to find additional support for this upgrade would be valuable.

Looking forward to your prompt response and collaboration on this project.

Thank you for your attention to this matter.

Warm regards,

SHAIK FAYAZ.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/71c5fd43-732c-4826-84e1-d6f81d43745dn%40googlegroups.com.

Re: Looking for a GWT expert for a porting of an application from an old version of GWT

Hi Shaik,

I typically don't like to be seeming to advertise on the mailing list, but we're doing much of the active development work in GWT these days. Ahmad Bawaneh and I wrote many of the patches to get GWT itself ready to run on newer Java versions, including updating its own build so that we can produce the release artifacts, run samples and build docs, and run tests on Java 11-21 (there is a pending PR that will fix one test to run on Java 22 now).

Work that will need to be done will vary based on the project - some will need none at all except for updating Java and GWT, while others might need to switch to jakarta.servlet, or deal with other classloader or --add-opens issues.

We can join a project directly and make changes in collaboration with your team, or work "over your shoulder" and join screensharing calls and answer emails to keep us more at arms length as consultants who can provide examples and solutions to specific questions. We have a standard NDA, or we can review and sign your own NDA.

I'll send an email directly, and am happy to be contacted off-list for any support we can offer around GWT and its ecosystem.

Thanks,

Colin

On Wednesday, July 24, 2024 at 10:03:00 AM UTC-5 sfay...@gmail.com wrote:

 Subject: Re: Seeking GWT Specialist for Application Upgrade

Hi Colin,

I hope this email finds you well. I am writing on behalf of Shaik Fayaz, who is interested in your company's assistance with upgrading their GWT application.

Shaik Fayaz is in need of support to port their application from GWT 2.5.1 and Java 8.0 to the latest version of GWT and Java 17 or later. Your expertise in this area would be greatly appreciated.

Could you please provide more details on how your company can assist with this project? Shaik Fayaz is keen to arrange a call to discuss the requirements further. You can reach out to Shaik Fayaz at sfay...@gmail.com to coordinate a suitable time for the call.

Additionally, Shaik Fayaz is open to utilizing community resources like the Gitter channel and stackoverflow, as suggested by Frank. Any guidance on where to find additional support for this upgrade would be valuable.

Looking forward to your prompt response and collaboration on this project.

Thank you for your attention to this matter.

Warm regards,

SHAIK FAYAZ.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/6e0e60c3-136c-4cbc-9020-5953f4df3d94n%40googlegroups.com.

Re: Looking for a GWT expert for a porting of an application from an old version of GWT

 Subject: Re: Seeking GWT Specialist for Application Upgrade

Hi Colin,

I hope this email finds you well. I am writing on behalf of Shaik Fayaz, who is interested in your company's assistance with upgrading their GWT application.

Shaik Fayaz is in need of support to port their application from GWT 2.5.1 and Java 8.0 to the latest version of GWT and Java 17 or later. Your expertise in this area would be greatly appreciated.

Could you please provide more details on how your company can assist with this project? Shaik Fayaz is keen to arrange a call to discuss the requirements further. You can reach out to Shaik Fayaz at sfayazmr@gmail.com to coordinate a suitable time for the call.

Additionally, Shaik Fayaz is open to utilizing community resources like the Gitter channel and stackoverflow, as suggested by Frank. Any guidance on where to find additional support for this upgrade would be valuable.

Looking forward to your prompt response and collaboration on this project.

Thank you for your attention to this matter.

Warm regards,

SHAIK FAYAZ.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/CAJc24Sap9ObWOYLjwGORY_cEetf%2BmTisWqjoARx8YdOPzYUAhw%40mail.gmail.com.

Re: Looking for a GWT expert for a porting of an application from an old version of GWT

Hi Antonio,

I replied to you off-list yesterday, but this is something that our company can help with. You can contact me at colin@vertispan.com to arrange a call to look into your project. We definitely also encourage community resources like the Gitter channel that Frank mentioned, this mailing list and stackoverflow.

On Wednesday, July 24, 2024 at 8:13:57 AM UTC-5 Frank Hossfeld wrote:

Hi,

I would say yes. Another great place looking for help is the GWT room:  https://matrix.to/#/#gwtproject_gwt:gitter.im

And, feel free to contact me. 

Antonio Leonforte schrieb am Dienstag, 23. Juli 2024 um 16:27:53 UTC+2:

Hi everyone,

hope this will not violate any rule. We have developed a quite complex client using GWT2.5.1 and Java 8.0  We need support from a professional in order to port the application to the latest version of GWT and Java 17 or later. Is this the right place to find  GWT specialist?

Thanks in advance.

 

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/8f2a7a78-32af-46f9-8801-62607d21da49n%40googlegroups.com.

Re: Looking for a GWT expert for a porting of an application from an old version of GWT

Hi,

I would say yes. Another great place looking for help is the GWT room:  https://matrix.to/#/#gwtproject_gwt:gitter.im

And, feel free to contact me. 

Antonio Leonforte schrieb am Dienstag, 23. Juli 2024 um 16:27:53 UTC+2:

Hi everyone,

hope this will not violate any rule. We have developed a quite complex client using GWT2.5.1 and Java 8.0  We need support from a professional in order to port the application to the latest version of GWT and Java 17 or later. Is this the right place to find  GWT specialist?

Thanks in advance.

 

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/943334b3-399a-4d7c-9566-f42a0c51d1f3n%40googlegroups.com.

Re: "Unload event listeners are deprecated" browser error

I put up https://github.com/gwtproject/gwt/pull/9984 as a proposal to resolve this, please take a look.

On Thursday, January 25, 2024 at 12:39:55 PM UTC-6 Colin Alworth wrote:

It looks like the purpose of registering the unload handler for any Window event is to avoid IE6-10 era memory leaks. From the notes on the MDN page, removing those other handlers will break the page when the bfcache is in use, but our use of the unload handler will opt GWT pages out.

The simplest fix appears to be to stop initializing the unload event tracking for resize/scroll events, and "let" those leak (which they won't, because IE in all forms is really-actually-totally-dead this time, right?). Next unload/beforeunload should be decoupled, so that each can be initialized separately. Then applications can remove their own usage of unload as they wish, but we should probably deprecate this event handler method (not the event and handler itself) as well.

I have filed https://github.com/gwtproject/gwt/issues/9908 to track this.

On Thursday, January 25, 2024 at 11:38:53 AM UTC-6 Thomas Broyer wrote:

Yes: https://developer.mozilla.org/en-US/docs/Web/API/Window/unload_event

Apparently, this happens when you use Window.addXxxHandler (and for instance the default PlaceController's delegate calls Window.addClosingHandler, which registers an unload handler but is only interested in the beforeunload event)

On Thursday, January 25, 2024 at 5:18:39 PM UTC+1 ofr...@gmail.com wrote:

Hello.

Browsers running our GWT application (version 2.11) have recently (this week) started reporting errors like this one:

[{"age":41550,"body":{"columnNumber":192,"id":"UnloadHandler","lineNumber":3210,"message":"Unload event listeners are deprecated and will be removed.","sourceFile":"ourmodule-0.js"},"type":"deprecation","url":"oururl","user_agent":"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Mobile Safari/537.36"}]

Any idea about why is this happening?  Is GWT using a deprecated browser feature?

Thanks!

Oscar

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/b15e893c-cc1e-46fc-b6ee-7c6adae89172n%40googlegroups.com.

Looking for a GWT expert for a porting of an application from an old version of GWT

Hi everyone,

hope this will not violate any rule. We have developed a quite complex client using GWT2.5.1 and Java 8.0  We need support from a professional in order to port the application to the latest version of GWT and Java 17 or later. Is this the right place to find  GWT specialist?

Thanks in advance.

 

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-web-toolkit/113cfbb8-dac1-453a-8c82-e928ec8f5fden%40googlegroups.com.