cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Showing results for 
Search instead for 
Did you mean: 

Community Tip - Need to share some code when posting a question or reply? Make sure to use the "Insert code sample" menu option. Learn more! X

Hide or encrypt MashUp parameters

SKannapiran
11-Garnet

Hide or encrypt MashUp parameters

I have a MashUp page where users select choices and then click "Show Result," which redirects them to a different MashUp page displaying the results. However, the selected choices are visible in the URL of the result MashUp page. For security reasons, we need to hide or encrypt these URL parameters. Implementing SSL is currently not an option due to time constraints. Does ThingWorx offer any quick solutions to hide or encrypt URL parameters? Please advise.

1 ACCEPTED SOLUTION

Accepted Solutions
Rocko
17-Peridot
(To:SKannapiran)

1) You shouldn't compromise on security. Get your certificates, even if they're self-signed.

2) Sensitive data should never be in the URL. Try to put that data into the session instead.

 

View solution in original post

3 REPLIES 3
Rocko
17-Peridot
(To:SKannapiran)

1) You shouldn't compromise on security. Get your certificates, even if they're self-signed.

2) Sensitive data should never be in the URL. Try to put that data into the session instead.

 

You can also create a Service or Expression that decides the Mashup to be displayed based on the selected choices.

How exactly are you doing the redirect, specifically why are those choices visible as Mashup Parameters?

 

We have taken the approach of using session. Thank you.

Top Tags