🚀 go-pugleaf

Awww heck...I hate it when I do that. I answered my own question in public.
For the curious, it's a security issue with a published workaround.

Here's an article on the subject:
http://www.javaworld.com/javaworld/javatips/jw-javatip34.html/

Thanks,
Ted

In article <763b99$u11$1@nnrp1.dejanews.com>,
  ted19@hotmail.com wrote:
> This is my understanding of how to POST data on an http connection from Java:
>
>  URL url = new URL("http://mario:8001/servlets/HighScoresServlet.class");
>  URLConnection urlc = url.openConnection();
>  HttpURLConnection http = (HttpURLConnection) urlc;
>  http.setDoOutput(true);
>  http.setMethod("POST");
>  OutputStream out = http.getOutputStream();
>  ...
>
> In IE, the openConnection() call returns a
> com.ms.net.wininet.http.HttpURLConnection
> which is ***not a subclass of java.net.HttpURLConnection***!!!
> (Thus causing a ClassCastException)
>
> How the heck am I supposed to POST data without access to the
> setMethod("POST") method in java.net.HttpURLConnection? Is this an attempt to
> get me to write nonportable code? I want to move serialized objects to a
> servlet, and POST is the only way. The default GET method is not what I want.
>
> Thanks,
> Ted
>
> -----------== Posted via Deja News, The Discussion Network ==----------
> http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own
>

-----------== Posted via Deja News, The Discussion Network ==----------
http://www.dejanews.com/       Search, Read, Discuss, or Start Your Own