| Welcome, Guest |
You have to register before you can post on our site.
|
| Latest Threads |
How to terminate HTTP Thr...
Forum: Indy
Last Post: rlebeau
08-14-2026, 08:01 AM
» Replies: 5
» Views: 351
|
VCL conversion
Forum: Delphi General Discussion
Last Post: marktuan
08-07-2026, 01:20 PM
» Replies: 0
» Views: 377
|
Looking for UI Design Tip...
Forum: Delphi General Discussion
Last Post: chrisjordon232
08-06-2026, 05:17 AM
» Replies: 0
» Views: 97
|
Simply convert PeerIp to ...
Forum: Indy
Last Post: DidierMenant
08-04-2026, 03:50 PM
» Replies: 2
» Views: 263
|
New CGDevTools build is a...
Forum: CGDevTools
Last Post: lfeliz
08-04-2026, 12:03 AM
» Replies: 2
» Views: 1,421
|
IW 16.2.0 Missing librari...
Forum: IntraWeb General Discussion
Last Post: JuergenS
07-31-2026, 09:44 AM
» Replies: 6
» Views: 1,354
|
Datatables question
Forum: IntraWeb General Discussion
Last Post: Alexandre Machado
07-28-2026, 04:34 AM
» Replies: 2
» Views: 326
|
CSS file not reloading af...
Forum: IntraWeb General Discussion
Last Post: CharlieDunn
07-27-2026, 08:27 PM
» Replies: 1
» Views: 510
|
Intraweb components missi...
Forum: IntraWeb General Discussion
Last Post: valmeras
07-27-2026, 03:18 PM
» Replies: 3
» Views: 451
|
Image question on tiwjqdb...
Forum: IntraWeb General Discussion
Last Post: alex.trejo@tttnet.com.mx
07-17-2026, 05:18 PM
» Replies: 6
» Views: 4,956
|
|
|
| Firefox cross-site scripting issue |
|
Posted by: joelcc - 10-05-2020, 07:41 PM - Forum: IntraWeb General Discussion
- Replies (11)
|
 |
I have a company testing our websites and they are reporting an issue with cross-site scripting with firefox 71.0. (Note: I also tested this with chrome and it does not have the same problem.)
It was tested with iw 15.2.15.
Here are the steps that they gave me to reproduce the issue.
-----------
The "callback", "ajaxevent" and "ArowId" parameters found on https://server.domain.com/providers/IsPr...tion.dll//$/callback can be modified to include executable JavaScript.
Browser used for testing: Firefox/71.0
Steps to reproduce:
1. Open Proof of Concept URL in specified browser.
2. The XSS injection will run and display a popup window.
Proof of Concept:
https://server.domain.com/providers/IsPr...tion.dll//$/callback?callback=%22%3E%3Cwhscheck%3E%3cbody/onbeforescriptexecute%3dalert``%3e
|
|
|
| Original StartParams to Restarted Session |
|
Posted by: rogfitz - 09-29-2020, 03:12 PM - Forum: IntraWeb General Discussion
- Replies (3)
|
 |
Hello!
I'm a new IntraWeb user so maybe I'm asking a stupid question...
I'm using IntraWeb 15.2.17 with Delphi 10.4.1 building a stand-alone exe.
The problem I have is with sessions when they end by timeout. I then want the session to restart, this works OK, BUT I loose the initial StartParams.
I send startparams as this when i connect to the IntraWeb server: http://127.0.0.1/$/Start?KLINIKID=/pbZUQZS2dPdQIVxRSeruQ==
KLINIKID=/pbZUQZS2dPdQIVxRSeruQ== is crutial for the session, but when it restarts I loose it.
I get KLINIKID=/pbZUQZS2dPdQIVxRSeruQ== to the session from IWServerController.OnParseParameter from the AParam parameter.
I have IWServerController.ShowStartParams = True.
Thanks for a GREAT product!
Best regards
/Roger
|
|
|
| Delphi 10.4.1 |
|
Posted by: rhcarpenter - 09-29-2020, 11:53 AM - Forum: IntraWeb General Discussion
- Replies (3)
|
 |
Installed Delphi 10.4.1 as an upgrade to 10.2.
I discovered Intraweb is no longer included in Delphi.
I went to the AtoZed site. It was a little confusing. Apparently Intraweb 15 is not free but will work in 10.4.1. Intraweb 14 is free but I found no information indicating it would run in Delphi 10.4.1.
Am I correct? Is Intraweb 15 not free?
Will Intraweb install and run in Delphi 10.4.1?
I will appreciate your input on this issue.
Thanks,
Randall Carpenter
|
|
|
| Panel borders when selecting IW 15.2.18 |
|
Posted by: Blanca80 - 09-29-2020, 07:55 AM - Forum: IntraWeb General Discussion
- Replies (1)
|
 |
Hello, we have updated to the latest intraweb version 15.2.18 and we're now finding that when we select into a region, suddenly the borders appear. Before the update, it wouldn't. Is there any way to not show the borders when user clicks above a region/panel/div?
thank you!
|
|
|
|