E
egarcia
Guest
Hello Marian, Thank you for your feedback. Yes, you should be able to validate the input passed to the server. A filter should not be accepted without validation whether it is in a final form or not (if the filter is not in a final form, it just depends on what the parser does and it could also be tricked). Passing only the parameters to the server makes it easier to validate them. (Parameterized queries would also help.) You should be able to use the approach mentioned above where you define your own plugin to pass parameters to the server. (I entered a report to consider this as a future enhancement so that it is supported and documented.) Regarding the count function. The reason why a separate request is done to the server is because we did not want to change the signature of the READ method at the time and the JSON representation for the DataSet does not provide a way to include additional properties. Also, using an HTTP header to return the count is not possible with a Data Object service. (The filter is only processed once since it uses the result from the READ request.) We have added a context feature that would allow you to pass data to the server and from the server to the client via HTTP headers (you can use it with a REST or a WebSpeed based service). If you are interested, you could use this feature to return the count on the READ request. Thanks again for your feedback. Edsel
Continue reading...
Continue reading...