I have recently had a security scan done on a site I am working on and it is reported that JavaScript can be injected into the page (XSS) as shown below. I am using IW 15.2.23 at the moment and wonder if there is something I can do to prevent it.
I am developing wint Delphi 12.1 Patch 1 and IW 15.6.3.
In an OnClick event of a button I need to execute two different procedures.
The first one save some data to a DB (quick, no problem), the second one call a web service which introduce some delay in response and update of the page.
The procedure is invoked inside a runtime created data module.
Is it possible to use TTask from PPL to execute the web service call asynchronously?
It will be ok to use PPL inside the thread where the data module is executed (considering the multi thread architecture of IW)?
I want to make a TCP Socket application that is secured with simple self signed SSL certificates.
In fact, IndyTCPServer and IndyTcpClient allow me to do most of the operations very easily.
However, when it comes to SSL operations, I fail.
I really don't understand why I can't do this. There are many examples, blogs and videos. But it shouldn't be this hard.
I have easily done a similar SSL operation for Mosquitto Broker on Linux.
I am writing the operations I have done step by step. Please tell me where I am missing or making a mistake.
I created my self-signed certificates with the following steps.
I have made SSL settings. As seen in the screenshot, I am establishing a connection with the Server.
Then I get an error in the Connect process with the Client. When I look at it with Debug, the first error that appears is, "Error accepting connection with SSL."then the error I see on the screen is "Connection reset by peer."
I have attached the project files. If you could please tell me what the problem is, I would be very grateful.
Code:
procedure TfrmMain.IdTCPServer1Connect(AContext: TIdContext);
begin
if AContext.Connection.IOHandler is TIdSSLIOHandlerSocketBase then
TIdSSLIOHandlerSocketBase(AContext.Connection.IOHandler).PassThrough := False;
mmoSrv.Lines.Add('Connected');
end;
procedure TfrmMain.IdServerIOHandlerSSLOpenSSL1GetPassword(var Password: string);
begin
Password := '123456';
end;
procedure TfrmMain.IdSSLIOHandlerSocketOpenSSL1GetPassword(var Password: string);
begin
Password := '123456';
end;
I used the files in step 1 to create the certificate and as dll.
Similar to the example "PostDataDemo", I want to query XML data via a corresponding content handler, but my content handler cannot find the query data.
C++ Builder 12 Patch 1
Edition: IntraWeb Ultimate Edition
IntraWeb Version: 15.6.3
32-bit Server on 64-bit Windows
HTTP Server is active on port: 80
HTTPS Server is active on port: 543 (OpenSSL v1.1.1)
In the server controller, the content handler is configured as follows:
I get an exception on WebApplication.CallBackResponse.AddJavaScriptToExecute (Exception class name = EAccessViolation) when two users try to access the same page at the same moment.
I have no problem as long as there is just one user displaying the page.
I want to make a TCP Socket application that is secured with simple self signed SSL certificates. 
