124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
|
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
|
-
-
-
+
+
+
-
|
clicking on a hyperlink or form on a page that was generated by the
same website.
Manually typing in a URL does not constitute the "same origin". Hence,
in the "env.tcl" example above the "wapp-allow-xorigin-params" interface
is used so that you can manually extend the URL to add new query parameters.
If query parameters can have side effects, then you should omit the
wapp-allow-xorigin-params call. Only invoke wapp-allow-xorigin-params
for web pages that only query information. Do not invoke
wapp-allow-xorigin-params on pages where the parameters can be used
wapp-allow-xorigin-params call. The wapp-allow-xorigin-params command
is safe for read-only web pages. Do not invoke wapp-allow-xorigin-params
on pages where the parameters can be used to change server state.
to change server-side state.
|