RE: onunload, ICEfaces

View: New views
2 Messages — Rating Filter:   Alert me  

RE: onunload, ICEfaces

by Stefan Frenzel :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

yes, it seems like the ICEfaces framework counts on correct web client
behavior. That's in fact bad design and makes it easy to run a DoS
attack against an ICEfaces application.

At the end of my test I included an invoke step which calls the
/block/dispose-views URL via POST using the ice session of the cookie as
content. In addition to that I reduced the session timeout in web.xml
and gave more heap memory to the application server.
But the invoke step doesn't really belong to the test. So, I wonder if
there is no support from WebTest/HtmlUnit?


Bye, Stefan

_______________________________________________
WebTest mailing list
WebTest@...
http://lists.canoo.com/mailman/listinfo/webtest

Re: RE: onunload, ICEfaces

by Marc Guillemot :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

this seems to be a really cool framework :-(

Latest release of HtmlUnit (and therefore recent WebTest builds) should
include support for onunload. Nevertheless it is possible that it is
correctly executed when a new page is invoked but not when the WebClient
is shut down at the end of the test. Can you check this, just by adding
an <invoke url="about:blank"/> at the end of your test instead of the
POST to /block/dispose-view?

Cheers,
Marc.

Stefan Frenzel a écrit :

> Hi,
>
> yes, it seems like the ICEfaces framework counts on correct web client
> behavior. That's in fact bad design and makes it easy to run a DoS
> attack against an ICEfaces application.
>
> At the end of my test I included an invoke step which calls the
> /block/dispose-views URL via POST using the ice session of the cookie as
> content. In addition to that I reduced the session timeout in web.xml
> and gave more heap memory to the application server.
> But the invoke step doesn't really belong to the test. So, I wonder if
> there is no support from WebTest/HtmlUnit?
>
>
> Bye, Stefan
>
> _______________________________________________
> WebTest mailing list
> WebTest@...
> http://lists.canoo.com/mailman/listinfo/webtest
>


_______________________________________________
WebTest mailing list
WebTest@...
http://lists.canoo.com/mailman/listinfo/webtest