Re: Heartbeat control for CMS

Hi Ben,

A few days ago I mentioned that we received problem reports that could be related to the iframe meta refresh technique you mentioned for implementing a heartbeat in Web browsers. Today we came across this security advisory related the use of iframe:

http://secunia.com/advisories/12959/

Although the reports we received are not related to security, there may be a connection. The reports we received are recent and only on fully patched machines. Anyway, I thought I'd let you know that we _believe_ that there are issues with the iframe meta refresh technique.

Regards,
-Vlad
http://xstandard.com




----- Original Message ----- 
From: "Vlad Alexander (XStandard)" <vlad.alexander-2yTxSKUaU0r2eFz/[email protected]>
To: <[email protected]>; <[email protected]>
Sent: Monday, November 01, 2004 9:49 PM
Subject: Re: [CMS] Heartbeat control for CMS


Hi Ben,

We are currently using the META REFRESH construct and for the most part it works okay. Unfortunately, we found this approach is not very reliable. The "Allow META REFRESH" setting can be disabled in some browsers. And there are some other issues reported to us that we cannot yet substantiate but be believe are related to this technique.

We need something more robust and JavaScript programmable. Besides "who is online" and document locking/unlocking features, we think this control can also be used to build an instant messenger.

We are going to make this control available free of charge and it will work in IE/Mozilla/Firefox on Windows.

Regards,
-Vlad
http://xstandard.com



----- Original Message ----- 
From: "Ben Noblet" <[email protected]>
To: <[email protected]>
Sent: Monday, November 01, 2004 4:27 PM
Subject: RE: [CMS] Heartbeat control for CMS


> > We are developing a control for Web based CMS called 
> > Heartbeat. This control runs in a browser and pulses (sends 
> > HTTP requests) to a given URL at a given interval so that the 
> > session does not timeout.
> 
> Sounds interesting ... But why not just place a small iframe on the page
> that loads a URL containing a META REFRESH tag.  That's what we do and it
> works in all browsers.  
> 
> Ben
> 
> 
> 
> _______________________________________________
> cms mailing list
> [email protected]
> Subscription controls:
> http://lists.cms-forum.org/mailman/listinfo/cms
> Netiquette FAQ and related CMS lists - [cms-forum], [cms-pr], [contentmanagers], [cmpros]
> http://www.cmsreview.com/NetiquetteFAQ.html
> 

_______________________________________________
cms mailing list
[email protected]
Subscription controls:
http://lists.cms-forum.org/mailman/listinfo/cms
Netiquette FAQ and related CMS lists - [cms-forum], [cms-pr], [contentmanagers], [cmpros]
http://www.cmsreview.com/NetiquetteFAQ.html