Return-Path: Delivered-To: apmail-cocoon-dev-archive@www.apache.org Received: (qmail 74165 invoked from network); 31 Oct 2004 18:16:18 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 31 Oct 2004 18:16:18 -0000 Received: (qmail 85078 invoked by uid 500); 31 Oct 2004 18:16:13 -0000 Delivered-To: apmail-cocoon-dev-archive@cocoon.apache.org Received: (qmail 84948 invoked by uid 500); 31 Oct 2004 18:16:11 -0000 Mailing-List: contact dev-help@cocoon.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: list-post: Reply-To: dev@cocoon.apache.org Delivered-To: mailing list dev@cocoon.apache.org Received: (qmail 84909 invoked by uid 99); 31 Oct 2004 18:16:11 -0000 X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests= X-Spam-Check-By: apache.org Received-SPF: pass (hermes.apache.org: local policy) Received: from [212.85.125.162] (HELO v07274.home.net.pl) (212.85.125.162) by apache.org (qpsmtpd/0.28) with SMTP; Sun, 31 Oct 2004 10:16:10 -0800 Received: from gprs7.idea.pl (HELO ?172.20.174.161?) (lgawron.mobilebox@home@217.116.100.249) by matrix15.home.net.pl with SMTP; 31 Oct 2004 18:16:01 -0000 Message-ID: <41852BDB.6000706@mobilebox.pl> Date: Sun, 31 Oct 2004 19:15:55 +0100 From: Leszek Gawron User-Agent: Mozilla Thunderbird 0.8 (Windows/20040913) X-Accept-Language: en-us, en MIME-Version: 1.0 To: dev@cocoon.apache.org Subject: Re: Possible security problem with flowscript References: <416FBE30.4060103@apache.org> <416FC0FF.1040000@mobilebox.pl> <416FC46A.3080505@apache.org> <416FC562.2050006@mobilebox.pl> <416FC80A.1030801@reverycodes.com> In-Reply-To: <416FC80A.1030801@reverycodes.com> Content-Type: text/plain; charset=ISO-8859-2; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N Vadim Gritsenko wrote: >> How can I retrieve that ID? I could implement a test version for Carsten. > > > It is in AbstractInterpreter.getInterpreterID() Some problems coming. Are there any reasons why doesn't Interpreter.getInterpreterID() exist? Also AbstractInterpreter.getInterpreterID() is protected. I have to make it public. The thing is: should I also move method declaration to interface? Next: From what I've got from reading the code I cannot query for Interpreter in ContunuationsManager. The only place where interpreter is available is FOM_Cocoon which means I have to change ContinuationsManager.createWebContinuation signature to pass the interpreterID along with current parameters. This change affects all flow implementations. Am I right? lg -- Leszek Gawron lgawron@mobilebox.pl