3DCenter Forum

HellHorse · 2005-05-07, 12:08:21

Ihr habt bestimmt schon vom Google Web Accelerator gehört. Mal abesehen von Datenschutz und Schutz der Privatsphäre hat das Ding noch einige andere Probleme:
http://37signals.com/svn/archives2/g..._designers.php

Zitat:

Google’s web accelerator seems like a good thing for the public web, but it can wreak havok on web-apps and other things with admin-links built into the UI. How’s that?

The accelerator scours a page and prefetches the content behind each link. This gives the illusion of pages loading faster (since they’ve already been pre-loaded behind the scenes). Here’s the problem: Google is essentially clicking every link on the page — including links like “delete this” or “cancel that.” And to make matters worse, Google ignores the Javascript confirmations. So, if you have a “Are you sure you want to delete this?” Javascript confirmation behind that “delete” link, Google ignores it and performs the action anyway.

We discovered this yesterday when a few people were reporting that their Backpack pages were “disappearing.” We were stumped until we dug a little deeper and discovered this Web Accelerator behavior. Once we figured this out we added some code to prevent Google from prefetching the pages and clicking the links, but it was quite disconcerting.

This wouldn’t be much of a problem on the public web since it’s pretty tough to be destructive on public web pages, but web apps, with their admin links here and there, can be considerably damaged. If you have a web app, it might be worth returning a 403 when the HTTP_X_MOZ is set to “prefetch” header is sent. This will keep Web Accelerator from clicking destructive links. Here’s an FAQ on prefetching for more information.

darph · 2005-05-07, 19:36:07

Wer baut denn auch kritische Abfragen in ein JavaScript?

HellHorse · 2005-05-07, 20:19:54

Zitat von darph:

Wer baut denn auch kritische Abfragen in ein JavaScript?

37signals offensichtlich

Wenn man es mit Links macht, bleibt das Problem das gleiche.

Aqualon · 2005-05-08, 16:56:27

Zitat von HellHorse:

Ihr habt bestimmt schon vom Google Web Accelerator gehört. Mal abesehen von Datenschutz und Schutz der Privatsphäre hat das Ding noch einige andere Probleme:
http://37signals.com/svn/archives2/g..._designers.php

Es wird immer lustiger:

http://www.heise.de/newsticker/meldung/59373

Aqua

2005-05-08, 17:05:55

nice one

xedo · 2005-05-08, 17:24:55

Sehr heftig, hab ich noch gar nicht von gehört... +g*

HellHorse · 2005-05-09, 09:06:14

Update:
Das Problem scheint nicht bei GWA, sondern bei 37signals zu liegen.
http://bitworking.org/news/I_m_sorry...ake_it_better_

2005-05-07, 12:08:21	#1 (im Thread / einzeln)
HellHorse Admiral Member Registriert: 2003-03-27 Beiträge: 3.357	Google Web Accelerator = pöse Ihr habt bestimmt schon vom Google Web Accelerator gehört. Mal abesehen von Datenschutz und Schutz der Privatsphäre hat das Ding noch einige andere Probleme: http://37signals.com/svn/archives2/g..._designers.php Zitat: Google’s web accelerator seems like a good thing for the public web, but it can wreak havok on web-apps and other things with admin-links built into the UI. How’s that? The accelerator scours a page and prefetches the content behind each link. This gives the illusion of pages loading faster (since they’ve already been pre-loaded behind the scenes). Here’s the problem: Google is essentially clicking every link on the page — including links like “delete this” or “cancel that.” And to make matters worse, Google ignores the Javascript confirmations. So, if you have a “Are you sure you want to delete this?” Javascript confirmation behind that “delete” link, Google ignores it and performs the action anyway. We discovered this yesterday when a few people were reporting that their Backpack pages were “disappearing.” We were stumped until we dug a little deeper and discovered this Web Accelerator behavior. Once we figured this out we added some code to prevent Google from prefetching the pages and clicking the links, but it was quite disconcerting. This wouldn’t be much of a problem on the public web since it’s pretty tough to be destructive on public web pages, but web apps, with their admin links here and there, can be considerably damaged. If you have a web app, it might be worth returning a 403 when the HTTP_X_MOZ is set to “prefetch” header is sent. This will keep Web Accelerator from clicking destructive links. Here’s an FAQ on prefetching for more information. Zitat: .. and it’s not “oh just thread your application”. Anyone that says that is basically an idiot, not appreciating the problems.

2005-05-07, 19:36:07	#2 (im Thread / einzeln)
darph Insane Member Registriert: 2003-08-24 Ort: Nicht in Hof Beiträge: 15.448	Re: Google Web Accelerator = pöse Wer baut denn auch kritische Abfragen in ein JavaScript? .(\ /) .() ....This is sick darphinator. You give him eggroll and he will lophe you long time. (> <)...... „Darum gleicht jeder, der auf meine Worte hört und tut, was ich sage, einem klugen Mann, der sein Haus auf felsigen Grund baut.“.........................

2005-05-07, 20:19:54	#3 (im Thread / einzeln)
HellHorse Admiral Member Threadstarter Registriert: 2003-03-27 Beiträge: 3.357	Re: Google Web Accelerator = pöse Zitat von darph: Wer baut denn auch kritische Abfragen in ein JavaScript? 37signals offensichtlich Wenn man es mit Links macht, bleibt das Problem das gleiche. Zitat: .. and it’s not “oh just thread your application”. Anyone that says that is basically an idiot, not appreciating the problems.

2005-05-08, 16:56:27	#4 (im Thread / einzeln)
Aqualon Avantgarde Member Registriert: 2003-05-07 Beiträge: 5.897	Re: Google Web Accelerator = pöse Zitat von HellHorse: Ihr habt bestimmt schon vom Google Web Accelerator gehört. Mal abesehen von Datenschutz und Schutz der Privatsphäre hat das Ding noch einige andere Probleme: http://37signals.com/svn/archives2/g..._designers.php Es wird immer lustiger: http://www.heise.de/newsticker/meldung/59373 Aqua

2005-05-08, 17:05:55	#5 (im Thread / einzeln)
Gast Gast Beiträge: n/a	Re: Google Web Accelerator = pöse nice one