adriaon

What about ETAGs?

1

ETAG's are useful for those we serve (static) content from the image in deployment environments.

REST depends on source code which is not available at deployment time in VASt and VW

3

Seaside REST depends on the availability of the source code. Sourcode however, is not available during deployment in VASt (and VW). The Seaside REST framework needs the names of the...

JQAjax>>#callback:json: and invalid json

9

Pentesters had fun with JQAjax>>#callback:json: while feeding it invalid json. Shouldn't it catch the json parsing error and respond with a bad request response or provide a hook for this...