<html><head></head><body><br><br><div class="gmail_quote">On 19 November 2014 6:41:44 pm IST, brendan kearney <bpk678@gmail.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<p dir="ltr">Yes and it seems java is even more sensitive. I had an array member defined on a line that was not terminated with a semicolon and browsers did not throw errors, but java did. Pactester did not catch this. Missing curly braces and I think quotes are caught.</p>
<p dir="ltr">Also of note, you have to set the content type header for a pac file or else you run into weird issues. I found that browsers are forgiving and will execute the script and take its output if the header is not set. Flash does not do this. It might call for the script but does not use it if the Content-Type header is not set to "application/x-ns-proxy-autoconfig".</p>
<p dir="ltr">GoToMeeting has also pissed me off. The client parses the script and takes any value found in it, before executing the script and taking the output of the execution. This has the result of finding inappropriate proxies to use, when you are in a corporate environment and have proxies dedicated to client access or other functions that should not be leveraged in all cases. I got their technical team on a call because we have a large citrix install base (both products have the same parent company) and complained to no avail. I had to write a doc on how to correct the client config for anyone needing to use GoTo... products.</p>
<div class="gmail_quote">On Nov 19, 2014 6:18 AM, "Kinkie" <<a href="mailto:gkinkie@gmail.com">gkinkie@gmail.com</a>> wrote:<br type="attribution" /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><p dir="ltr">One word of caution: pactester uses the Firefox JavaScript engine, which is more forgiving than MSIE's. So while it is a very useful tool, it may let some errors slip through.</p>
<div class="gmail_quote">On Nov 18, 2014 9:45 PM, "Jason Haar" <<a href="mailto:Jason_Haar@trimble.com" target="_blank">Jason_Haar@trimble.com</a>> wrote:<br type="attribution" /><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On 19/11/14 01:39, Brendan Kearney wrote:<br />
> i would suggest that if you use a pac/wpad solution, you look into<br />
> pactester, which is a google summer of code project that executes pac<br />
> files and provides output indicating what actions would be returned to<br />
> the browser, given a URL.<br />
couldn't agree more. We have it built into our QA to run before we ever<br />
roll out any change to our WPAD php script (a bug in there means<br />
everyone loses Internet access - so we have to be careful).<br />
<br />
Auto-generating a PAC script per client allows us to change behaviour<br />
based on User-Agent, client IP, proxy and destination - and allows us to<br />
control what web services should be DIRECT and what should be proxied.<br />
There is no other way of achieving those outcomes.<br />
<br />
Oh yes, and now that both Chrome and Firefox support proxies over HTTPS,<br />
I'm starting to ponder putting up some form of proxy on the Internet for<br />
our staff to use (authenticated of course!) - WPAD makes that something<br />
we could implement with no client changes - pretty cool :-)<br />
<br />
--<br />
Cheers<br />
<br />
Jason Haar<br />
Corporate Information Security Manager, Trimble Navigation Ltd.<br />
Phone: <a href="tel:%2B1%20408%20481%208171" value="+14084818171" target="_blank">+1 408 481 8171</a><br />
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1<br />
<br />
_______________________________________________<br />
squid-users mailing list<br />
<a href="mailto:squid-users@lists.squid-cache.org" target="_blank">squid-users@lists.squid-cache.org</a><br />
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br />
</blockquote></div>
<br />_______________________________________________<br />
squid-users mailing list<br />
<a href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br />
<a href="http://lists.squid-cache.org/listinfo/squid-users" target="_blank">http://lists.squid-cache.org/listinfo/squid-users</a><br />
<br /></blockquote></div>
<p style="margin-top: 2.5em; margin-bottom: 1em; border-bottom: 1px solid #000"></p><pre class="k9mail"><hr /><br />squid-users mailing list<br />squid-users@lists.squid-cache.org<br /><a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br /></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>