[jboss-user] [JBoss Seam] - Page Context & Security

spambob do-not-reply at jboss.com
Fri Apr 13 17:37:39 EDT 2007


Regarding page context the reference documentation says:
anonymous wrote : The state is actually serialized to the client, so this construct is extremely robust with respect to multi-window operation and the back button.(at http://docs.jboss.com/seam/1.2.1.GA/reference/en/html/concepts.html#d0e2569)

How secure is this serialized state? Is it encrypted somehow - e.g. like the client side state saving - or can most information be retrieved by simply looking at the html source?

I'm asking because I have a page scoped component that has a few properties I don't won't / can't show to users. So is this secure enough or a big mistake?

View the original post : http://www.jboss.com/index.html?module=bb&op=viewtopic&p=4037244#4037244

Reply to the post : http://www.jboss.com/index.html?module=bb&op=posting&mode=reply&p=4037244



More information about the jboss-user mailing list