[dev] [cvs] commit: genie list.php genie/js prototype.js genie/templates/list item_headers.inc

Chuck Hagenbuch chuck at horde.org
Sat Dec 9 13:34:53 PST 2006


Quoting Jan Schneider <jan at horde.org>:

>>  Log:
>>  Use the rest prefs interface instead of the RPC_rest backend  
>> (which should go away).
>
> Why?

Because for one thing it is not rest-ful; it doesn't differentiate  
between getting and setting data (GET vs. POST), which is one of the  
cornerstones of rest; it uses a function-call interface instead of a  
resource-oriented interface which is also not restful, and because it  
exposes all of our API calls via GET, which exacerbates the potential  
affect of any XSS attacks.

This is one of things I've read recently influencing me in this direction:
http://duncan-cragg.org/blog/post/strest-service-trampled-rest-will-break-web-20/

-chuck

-- 
"we are plastered to the windshield of the bus that is time." - Chris


More information about the dev mailing list