[dev] [cvs] commit: genie list.php genie/js prototype.js genie/templates/list item_headers.inc
Chuck Hagenbuch
chuck at horde.org
Sat Dec 9 13:34:53 PST 2006
Quoting Jan Schneider <jan at horde.org>:
>> Log:
>> Use the rest prefs interface instead of the RPC_rest backend
>> (which should go away).
>
> Why?
Because for one thing it is not rest-ful; it doesn't differentiate
between getting and setting data (GET vs. POST), which is one of the
cornerstones of rest; it uses a function-call interface instead of a
resource-oriented interface which is also not restful, and because it
exposes all of our API calls via GET, which exacerbates the potential
affect of any XSS attacks.
This is one of things I've read recently influencing me in this direction:
http://duncan-cragg.org/blog/post/strest-service-trampled-rest-will-break-web-20/
-chuck
--
"we are plastered to the windshield of the bus that is time." - Chris
More information about the dev
mailing list