[JIRA] Created: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

[JIRA] Created: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

JIRA (Hippo Helpdesk)
Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?
---------------------------------------------------------------------------------------------------------

                 Key: PORTAL-110
                 URL: https://issues.onehippo.com/browse/PORTAL-110
             Project: Hippo Portal
          Issue Type: Question
         Environment: Websphere 6.1
            Reporter: Aisling O'Sullivan


I have a psml page which has one portlet defined on it - for search results.

External sites are leveraging our search submitting requests to our psml page.  When a render request comes for the psml page I am validating that it is coming from an allowed host.  I am doing this validation in a Spring Interceptor.  If the request isn't from an allowed host I want to not only stop the portlet from processing, but I want to completely change the page that I am rendering.  I don't want the header or footer, and I don't necessarily want to be in the portal pipeline.  Is there a way for the Interceptor to stop the portal from completing the render requests for the other portlets (called from the within the page layout decorator) and do something else, like show a simple html page instead?

Thanks,
Aisling

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
_______________________________________________
Hippoportal-dev mailing list
[hidden email]
http://lists.hippo.nl/mailman/listinfo/hippoportal-dev
Reply | Threaded
Open this post in threaded view
|

[JIRA] Assigned: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

JIRA (Hippo Helpdesk)

     [ https://issues.onehippo.com/browse/PORTAL-110?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Woonsan Ko reassigned PORTAL-110:
---------------------------------

    Assignee: Woonsan Ko

> Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: PORTAL-110
>                 URL: https://issues.onehippo.com/browse/PORTAL-110
>             Project: Hippo Portal
>          Issue Type: Question
>         Environment: Websphere 6.1
>            Reporter: Aisling O'Sullivan
>            Assignee: Woonsan Ko
>
> I have a psml page which has one portlet defined on it - for search results.
> External sites are leveraging our search submitting requests to our psml page.  When a render request comes for the psml page I am validating that it is coming from an allowed host.  I am doing this validation in a Spring Interceptor.  If the request isn't from an allowed host I want to not only stop the portlet from processing, but I want to completely change the page that I am rendering.  I don't want the header or footer, and I don't necessarily want to be in the portal pipeline.  Is there a way for the Interceptor to stop the portal from completing the render requests for the other portlets (called from the within the page layout decorator) and do something else, like show a simple html page instead?
> Thanks,
> Aisling

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
_______________________________________________
Hippoportal-dev mailing list
[hidden email]
http://lists.hippo.nl/mailman/listinfo/hippoportal-dev
Reply | Threaded
Open this post in threaded view
|

[JIRA] Commented: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

JIRA (Hippo Helpdesk)
In reply to this post by JIRA (Hippo Helpdesk)

    [ https://issues.onehippo.com/browse/PORTAL-110?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=136912#comment-136912 ]

Woonsan Ko commented on PORTAL-110:
-----------------------------------

Hi Aisling,

I assume you mean an interceptor for a portlet, not portal.
Basically, portal itself is not a spring web mvc application (though it leverages spring as a component framework), so it's not simple to use an interceptor to intercept the whole portal request processing.
One of the simplest solution I can suggest is to add one more servlet filter for checking the requesting hosts and redirecting to some other page.
You can refer to XXSUrlAttackFilter [1].
The XXSUrlAttackFilter checks the url path and query string and sends an HTTP error when there's a suspicious request.
Your filter could check the requesting hosts and redirect the request to some other page (maybe static html or something else; any servlet path.)
If this wouldn't fit for your requirement, please let us know.

Regards,

Woonsan

[1] https://svn.apache.org/repos/asf/portals/jetspeed-2/portal/trunk/components/jetspeed-portal/src/main/java/org/apache/jetspeed/engine/servlet/XXSUrlAttackFilter.java

> Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: PORTAL-110
>                 URL: https://issues.onehippo.com/browse/PORTAL-110
>             Project: Hippo Portal
>          Issue Type: Question
>         Environment: Websphere 6.1
>            Reporter: Aisling O'Sullivan
>            Assignee: Woonsan Ko
>
> I have a psml page which has one portlet defined on it - for search results.
> External sites are leveraging our search submitting requests to our psml page.  When a render request comes for the psml page I am validating that it is coming from an allowed host.  I am doing this validation in a Spring Interceptor.  If the request isn't from an allowed host I want to not only stop the portlet from processing, but I want to completely change the page that I am rendering.  I don't want the header or footer, and I don't necessarily want to be in the portal pipeline.  Is there a way for the Interceptor to stop the portal from completing the render requests for the other portlets (called from the within the page layout decorator) and do something else, like show a simple html page instead?
> Thanks,
> Aisling

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
_______________________________________________
Hippoportal-dev mailing list
[hidden email]
http://lists.hippo.nl/mailman/listinfo/hippoportal-dev
Reply | Threaded
Open this post in threaded view
|

[JIRA] Assigned: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

JIRA (Hippo Helpdesk)
In reply to this post by JIRA (Hippo Helpdesk)

     [ https://issues.onehippo.com/browse/PORTAL-110?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Woonsan Ko reassigned PORTAL-110:
---------------------------------

    Assignee: Hippo Helpdesk  (was: Woonsan Ko)

> Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: PORTAL-110
>                 URL: https://issues.onehippo.com/browse/PORTAL-110
>             Project: Hippo Portal
>          Issue Type: Question
>         Environment: Websphere 6.1
>            Reporter: Aisling O'Sullivan
>            Assignee: Hippo Helpdesk
>
> I have a psml page which has one portlet defined on it - for search results.
> External sites are leveraging our search submitting requests to our psml page.  When a render request comes for the psml page I am validating that it is coming from an allowed host.  I am doing this validation in a Spring Interceptor.  If the request isn't from an allowed host I want to not only stop the portlet from processing, but I want to completely change the page that I am rendering.  I don't want the header or footer, and I don't necessarily want to be in the portal pipeline.  Is there a way for the Interceptor to stop the portal from completing the render requests for the other portlets (called from the within the page layout decorator) and do something else, like show a simple html page instead?
> Thanks,
> Aisling

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
_______________________________________________
Hippoportal-dev mailing list
[hidden email]
http://lists.hippo.nl/mailman/listinfo/hippoportal-dev
Reply | Threaded
Open this post in threaded view
|

[JIRA] Assigned: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

JIRA (Hippo Helpdesk)
In reply to this post by JIRA (Hippo Helpdesk)

     [ https://issues.onehippo.com/browse/PORTAL-110?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hippo Helpdesk reassigned PORTAL-110:
-------------------------------------

    Assignee:     (was: Hippo Helpdesk)

> Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: PORTAL-110
>                 URL: https://issues.onehippo.com/browse/PORTAL-110
>             Project: Hippo Portal
>          Issue Type: Question
>         Environment: Websphere 6.1
>            Reporter: Aisling O'Sullivan
>
> I have a psml page which has one portlet defined on it - for search results.
> External sites are leveraging our search submitting requests to our psml page.  When a render request comes for the psml page I am validating that it is coming from an allowed host.  I am doing this validation in a Spring Interceptor.  If the request isn't from an allowed host I want to not only stop the portlet from processing, but I want to completely change the page that I am rendering.  I don't want the header or footer, and I don't necessarily want to be in the portal pipeline.  Is there a way for the Interceptor to stop the portal from completing the render requests for the other portlets (called from the within the page layout decorator) and do something else, like show a simple html page instead?
> Thanks,
> Aisling

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
_______________________________________________
Hippoportal-dev mailing list
[hidden email]
http://lists.hippo.nl/mailman/listinfo/hippoportal-dev
Reply | Threaded
Open this post in threaded view
|

[JIRA] Closed: (PORTAL-110) Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?

JIRA (Hippo Helpdesk)
In reply to this post by JIRA (Hippo Helpdesk)

     [ https://issues.onehippo.com/browse/PORTAL-110?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Hippo Helpdesk closed PORTAL-110.
---------------------------------

         Assignee: Woonsan Ko
    Fix Version/s: 2.01.01
       Resolution: Fixed

> Can a Spring Interceptor get the portal to stop processing render requests for everything on a psml page?
> ---------------------------------------------------------------------------------------------------------
>
>                 Key: PORTAL-110
>                 URL: https://issues.onehippo.com/browse/PORTAL-110
>             Project: Hippo Portal
>          Issue Type: Question
>         Environment: Websphere 6.1
>            Reporter: Aisling O'Sullivan
>            Assignee: Woonsan Ko
>             Fix For: 2.01.01
>
>
> I have a psml page which has one portlet defined on it - for search results.
> External sites are leveraging our search submitting requests to our psml page.  When a render request comes for the psml page I am validating that it is coming from an allowed host.  I am doing this validation in a Spring Interceptor.  If the request isn't from an allowed host I want to not only stop the portlet from processing, but I want to completely change the page that I am rendering.  I don't want the header or footer, and I don't necessarily want to be in the portal pipeline.  Is there a way for the Interceptor to stop the portal from completing the render requests for the other portlets (called from the within the page layout decorator) and do something else, like show a simple html page instead?
> Thanks,
> Aisling

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
_______________________________________________
Hippoportal-dev mailing list
[hidden email]
http://lists.hippo.nl/mailman/listinfo/hippoportal-dev