Keeping Google Web Accelerator from Breaking Your Stuff

Ok everyone, need to start checking for the "HTTP_X_MOZ: Prefetch" header on your apps. Or better yet, just start using HTTPS for any stateful applications. Mozilla has done some prefecting, but it has usually been on the link rel= stuff, but GWA now at least seems to honor their header format when it builds its predictive pre-cache.

Comments

RE: Keeping Google Web Accellerator from Breaking Your Stuff

If you rely on javascript then your app sucks anyway. You never know what client might acces it and NOT implement javascript, including regular ole browsers with it disabled.

If you need an "are you sure" button then you need a SERVER SIDE "are you sure" validation - build that FIRST - make sure the app works WITHOUT JAVASCRIPT - and then add javascript, if you want, as a convenience later (so yes you then have both).

As for the accelerator just clicking on "delete" and "cancel" links and such in an admin setting, yeah thats a valid issue, but most apps already have admin in ssl mode or are not mass "admin" mode enabled (and the admins not using it behind such accelerator).

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.