<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:arial,helvetica,sans-serif;font-size:10pt"><div style="font-family: arial,helvetica,sans-serif; font-size: 10pt;">Hi Jim,<br><br>What's happening is that you're getting a "cross site scripting" error.<br><br>Here's some reading on Cross Site Scripting:<br><span><a target="_blank" href="http://www.cgisecurity.com/articles/xss-faq.shtml">http://www.cgisecurity.com/articles/xss-faq.shtml</a></span><br><span><a target="_blank" href="http://en.wikipedia.org/wiki/Cross-site_scripting">http://en.wikipedia.org/wiki/Cross-site_scripting</a></span><br><br>The gist:<br><span>GeoMOOSE is using the XMLHTTP object (AJAX) to read the results of the request because it needs to see if the HTML has any XML "commands" in it for GeoMOOSE to process. Since the site (<a target="_blank" href="http://156.98.2.251">http://156.98.2.251</a>) is not the same as the
one the page is running on, then you'll get a security error and the request will not be processed.</span><br><br>The solution(s):<br>1) Make the requests look the same using a IIS or Apache trick. Both servers have the ability to do proxy-requests and responses. Set up one for the WFS download service.<br>2) Use a "proxy" script. This is a script of some-sort that sits on the same server as GeoMOOSE and allows it to download arbitrary pages.<br>3) Put GeoMOOSE on the same server as the WFS servlet script.<br><br>-Duck<br><br><div style="font-family: times new roman,new york,times,serif; font-size: 12pt;">----- Original Message ----<br>From: Jim Dickerson <Jim.Dickerson@state.mn.us><br>To: Dan Little <danlittle@yahoo.com><br>Sent: Friday, October 19, 2007 1:30:52 PM<br>Subject: RE: [Geomoose-users] How do I specify a GET or POST in my serviceURL?<br><br>
<style type="text/css">DIV {
MARGIN:0px;}
</style>
<div dir="ltr" align="left"><span class="573392218-19102007"><font color="#0000ff" face="Arial" size="2">I'm trying to add a tool to the toolbar that sends a
request to a servlet. Here's my service entry:</font></span></div>
<div dir="ltr" align="left"><span class="573392218-19102007"><font color="#0000ff" face="Arial" size="2"> <service title="WFS Download"
invisible="true" default="true" locked="true"
icon="shared/images/toolbar/WFS_download.jpg"
highlight="shared/images/toolbar/WFS_download_selected.jpg"
selectable="false"><br>
<url><a target="_blank" href="http://156.98.2.251/servlet/requestWFSstreamG?">http://156.98.2.251/servlet/requestWFSstreamG?</a></url><br>
</service><br></font></span></div>
<div dir="ltr" align="left"><span class="573392218-19102007"><font color="#0000ff" face="Arial" size="2">When executed, I get this error: </font></span></div>
<div dir="ltr" align="left"><span class="573392218-19102007"><font color="#0000ff" face="Arial" size="2"><font color="#000000" face="Times New Roman" size="3"> </font><span class="objectBox objectBox-errorMessage hasTwisty opened">uncaught exception:
Permission denied to call method XMLHttpRequest.open
<div class="panelNode panelNode-console">
<div class="logRow logRow-errorMessage">
<div class="errorTrace">
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">getHTTPObject</a>()<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 272)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">callService</a>(<a rel="nofollow" class="objectLink objectLink-element"><span class="selectorHidden"><span class="selectorTag">service</span><span class="selectorId"></span><span class="selectorClass"></span><span class="selectorValue"></span></span></a><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 892)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">triggerEvent</a>(<span class="objectBox objectBox-string">"callservice"</span><span class="arrayComma">,
</span><a rel="nofollow" class="objectLink objectLink-element"><span class="selectorHidden"><span class="selectorTag">service</span><span class="selectorId"></span><span class="selectorClass"></span><span class="selectorValue"></span></span></a><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 320)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">onclick</a>()<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 844)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">renderDefault</a>(<span class="objectBox objectBox-string">"content_service_form"</span><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 847)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">setParent</a>(<span class="objectBox objectBox-string">"content_service_form"</span><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 809)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">renderServiceForm</a>(<a rel="nofollow" class="objectLink objectLink-element"><span class="selectorHidden"><span class="selectorTag">service</span><span class="selectorId"></span><span class="selectorClass"></span><span class="selectorValue"></span></span></a><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 854)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">serviceForm</a>(<a rel="nofollow" class="objectLink objectLink-element"><span class="selectorHidden"><span class="selectorTag">service</span><span class="selectorId"></span><span class="selectorClass"></span><span class="selectorValue"></span></span></a><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 877)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">(no name)</a>(<a rel="nofollow" class="objectLink objectLink-element"><span class="selectorHidden"><span class="selectorTag">service</span><span class="selectorId"></span><span class="selectorClass"></span><span class="selectorValue"></span></span></a><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">statedemo.html (line 552)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">triggerEvent</a>(<span class="objectBox objectBox-string">"serviceform"</span><span class="arrayComma">,
</span><a rel="nofollow" class="objectLink objectLink-element"><span class="selectorHidden"><span class="selectorTag">service</span><span class="selectorId"></span><span class="selectorClass"></span><span class="selectorValue"></span></span></a><span class="arrayComma"></span>)<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 320)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">onclickCallService</a>()<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line 765)</span></div>
<div class="objectBox objectBox-stackFrame"><a rel="nofollow" class="objectLink">onclickServiceLink</a>()<span class="objectLink-sourceLink objectLink">GeoMOOSE.js (line
764)</span></div></div>
<div class="errorSourceBox errorSource-none"><span class="errorSource"></span> </div>
<div class="errorSourceBox errorSource-none"><span class="errorSource"><span class="573392218-19102007">I'm not trying to do an XMLHttpRequest, just a
GET. The type is suppposed to default to POST/GET encoding so why is it
trying to use XMLHttpRequest?</span></span></div>
<div class="errorSourceBox errorSource-none"><span class="errorSource"><span class="573392218-19102007"></span></span> </div>
<div class="errorSourceBox errorSource-none"><span class="errorSource"><span class="573392218-19102007">Jim</span></span></div><a rel="nofollow" class="objectLink objectLink-sourceLink collapsed"></a></div></div></span></font></span></div><br>
<div class="OutlookMessageHeader" dir="ltr" align="left" lang="en-us">
<hr tabindex="-1">
<font face="Tahoma" size="2"><b>From:</b>
geomoose-users-bounces@lists.sourceforge.net
[mailto:geomoose-users-bounces@lists.sourceforge.net] <b>On Behalf Of </b>Dan
Little<br><b>Sent:</b> Thursday, October 18, 2007 6:22 PM<br><b>To:</b> Jim
Dickerson; geomoose-users@lists.sourceforge.net<br><b>Subject:</b> Re:
[Geomoose-users] How do I specify a GET or POST in my
serviceURL?<br></font><br></div>
<div></div>
<div style="font-size: 10pt; font-family: arial,helvetica,sans-serif;">
<div style="font-size: 10pt; font-family: arial,helvetica,sans-serif;">Jim, the
message will be sent as a get or post automatically depending on the length of
the request.<br><br>
<div style="font-size: 12pt; font-family: times new roman,new york,times,serif;">-----
Original Message ----<br>From: Jim Dickerson
<Jim.Dickerson@state.mn.us><br>To:
geomoose-users@lists.sourceforge.net<br>Sent: Thursday, October 18, 2007 5:50:58
PM<br>Subject: [Geomoose-users] How do I specify a GET or POST in my service
URL?<br><br>When using the <url> tag, what determines whether it is a GET
or POST?<br>Does the use of <input> tags imply one or the other? Are
<input> tags<br>used with both?<br><br>Jim
Dickerson<br><br>-------------------------------------------------------------------------<br>This
<a rel="nofollow" target="_blank" href="http://SF.net">SF.net</a> email is sponsored by: Splunk
Inc.<br>Still grepping through log files to find problems? Stop.<br>Now
Search log events and configuration files using AJAX and a browser.<br>Download
your FREE copy of Splunk now >> <a rel="nofollow" target="_blank" href="http://get.splunk.com/">http://get.splunk.com/</a><br>_______________________________________________<br>Geomoose-users
mailing list<br><a rel="nofollow" ymailto="mailto:Geomoose-users@lists.sourceforge.net" target="_blank" href="mailto:Geomoose-users@lists.sourceforge.net">Geomoose-users@lists.sourceforge.net</a><br><a rel="nofollow" target="_blank" href="https://lists.sourceforge.net/lists/listinfo/geomoose-users">https://lists.sourceforge.net/lists/listinfo/geomoose-users</a><br></div><br></div></div><br>__________________________________________________<br>Do
You Yahoo!?<br>Tired of spam? Yahoo! Mail has the best spam protection around
<br><span><a target="_blank" href="http://mail.yahoo.com">http://mail.yahoo.com</a> </span></div><br></div></div><br>__________________________________________________<br>Do You Yahoo!?<br>Tired of spam? Yahoo! Mail has the best spam protection around <br>http://mail.yahoo.com </body></html>