19 Dec
2008
19 Dec
'08
9:24 a.m.
Hi Yishay,
On Dec 19, 2008, at 3:54 AM, Yishay Mor wrote:
I've posted a snippet:
http://code.xwiki.org/xwiki/bin/view/Snippets/GenericXMLapiSnippet
Which adds a very simple XML API to a site. This API allows other
sites to
programmaticaly query the XWiki site, and display data from it in
any form
they choose.
You can see an example here:
http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/api/
genericXML
In case you didn't know about it, all xwiki pages can be viewed as XML
right (just add xpage=xml i the URL)? Then all you need is an XPath
expression to query whatever part you're interested in. Or a XSL
transformation to transform it into another XML document.
The snippet looks cool but it's quite hard to understand what it does.
Maybe you could add some more explanation and examples?
I came across two problems in the process of writing
this. One is
general,
and onw specific to my site - and fatal.
the first problem is that is seems like this API can deliver
protected data
to a non-registered user. To avoid this on my site, I restricted it
not to
show classes under the XWiki space. Shouldn't this be blocked at a
lower
level?
It's already blocked by the permission system and for password fields
you shouldn't be able to see the value.
If you don't want users to view some data you must make the page non
viewable for them.
The second problem was that I have some fields
(propoerties) in some
of the
classes which I'm not using. Since I can't delete them, I decided to
change
the name to ".unused" and filter. However, once I did this it seems
to have
completly crashed the class at hand. I can't even look at the Class
in the
ClassEditor to delete the latest versions and go back to the latest
good
one.
Here is the corrupted class:
http://patternlanguagenetwork.myxwiki.org/xwiki/bin/view/Cases/CaseClass
I've never seen that :) Something is indeed deeply broken since the
rendering is failing to display but I don't know why.
Thanks
-Vincent