Re: Wosid suppression broken in 5.4?
Re: Wosid suppression broken in 5.4?
- Subject: Re: Wosid suppression broken in 5.4?
- From: Guido Neitzer <email@hidden>
- Date: Tue, 18 Dec 2007 20:19:42 -0700
On 18.12.2007, at 19:44, Mr. Pierre Frisch wrote:
So in the case you mention if the hyperlink is generated in response
to direct action with no session the session ID will not be added to
the URL. If there is a session as it is typical in a component
response page you will get a session ID, this is right if you are
using this to generate internal links and mostly false if you are
generating external links, in those cases you should use the ?
wosid=false binding, which will guarantee that you will never get a
session ID in the URL. Automatically including the session ID
prevents a number of bad behavior where session get recreated when
they should not.
I can understand your case here, but I still can not agree.
While it sounds useful, I don't think that the behaviour is what
people expect when they pass in a complete URL. It is definitely not
what I expect when I say "Hey, take that string as the href!". I hate
when tools try to be smarter then they can be.
In my opinion everything that is bound to href should be considered
final by the framework as I gave it a final string. For other stuff
there are other bindings, like directActionName, action and so on. It
was always the case (and good and correct as far as I can see it),
that if you bound to href you were responsible for delivering a
correct and complete URL.
To put it that way: I don't think a tool is smart if it does things a
normal user wouldn't expect just to mask the obvious errors of others.
You decide, obviously, but I still think that a tool can never be
smart enough to make these decisions.
If you really want to leave it as it is, you should consider not
adding the session id when the URL is an absolute URL. I'm still not
really happy with that as it is against any gut feeling I have about
the href binding, but okay, that might just be me.
cug
--
http://www.event-s.net
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Webobjects-dev mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden