[SHINDIG-1822] Resouces(js,css) Requests through the shindig /concat servlet/proxy servlet are not signed

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 2.5.0-beta2
• Fix Version/s: 2.5.0-beta2
• Component/s: Java
• Assignee: Unassigned
• Reporter: Zhihong Yang
• Created: 23/Jul/12 02:45
• Updated: 23/Jul/12 09:50

Description

Create a gadget that just has a 
<Content><[CDATA[
<script src="SOME-JS-FILE.js" type="text/javascript"></script>
<link rel="stylesheet" type="text/css" href="SOME-CSS-FILE.css" />
]]>
</Content>

During the content rewrite, the container will create a js link to the Concat servlet that includes that JS or create a css link to proxy servlet that includes that CSS.

A config option as below will be added to container.js so that URLs to the concat/proxy servlet include a security token (st=<gadet-security-token>), via this security token, the request to those js/css file from gadget can be idendified and authorized.

//Enables/Disables securiry token for js, css resources loaded by concat servlet/proxy servlet
"gadgets.admin.enableSecuryTokenForConcat" : "false",