Activity

From 04/03/2026 to 05/02/2026

12:50 PM Feature #10451 (WIP): GUI interaction event logging: *Code review 10451a revisions 16515..16522*
* *[MAJOR]* _security_ @UITracker@.@<clinit>@: The keylogger warning is ... Hynek Cihlar
07:51 AM Feature #10685 (Closed): Move name_map.xml to the cvt folder: Greg Shah

08:43 AM Feature #11422: add support for passkey authentication: Over 20 years ago, we implemented certificate-based authentication as part of the core security model of FWD. Now, t... Greg Shah
08:38 AM Feature #11422 (New): add support for passkey authentication: Greg Shah

02:02 AM Bug #11327: implement size limited "chunking" for bulk data transfer between client and server: I have analyzed all the cases where RMI calls have at least one @byte[]@ or as the return type.
Methods which cont... Teodor Gorghe

11:21 AM Bug #11327: implement size limited "chunking" for bulk data transfer between client and server: The same needs to be considered if there are exports which transfer or return a longchar value - these can be huge. Constantin Asofiei
08:57 AM Feature #11403: add prominent logging ahead of when certificates expire: We need to log in a very visible fashion ahead of when certificates will expire. In #11398 a customer had a root CA ... Greg Shah
08:54 AM Feature #11403 (New): add prominent logging ahead of when certificates expire: Greg Shah
05:07 AM Feature #10451 (Review): GUI interaction event logging: Addressed code review as rev *16522*. I also added the one time warning.
Hynek, please review. Thanks! Paula Păstrăguș
02:54 AM Feature #10451 (WIP): GUI interaction event logging: *Code review 10451a revisions 16515..16521*
* *[MAJOR]* _performance_ @TitledWindow@.@processEvent@: In the new @Key... Hynek Cihlar

08:00 AM Feature #10451: GUI interaction event logging: I agree this is a potential security risk. It is enabled purely by setting a logging level, right? That is somethin... Greg Shah
04:45 AM Feature #10451: GUI interaction event logging: Maybe we can exclude password fill-ins from logging. There is a place in counteract where users actually enter passwo... Paula Păstrăguș
04:40 AM Feature #10451: GUI interaction event logging: Paula Păstrăguș wrote:
> From my POV, this feature is meant strictly for a testing environment, not for production u... Hynek Cihlar
04:40 AM Feature #10451: GUI interaction event logging: From my POV, this feature is meant strictly for a testing environment, not for production use. Still, you raise a fai... Paula Păstrăguș
04:35 AM Feature #10451: GUI interaction event logging: Logging the keyboard events (and the types keys) is a potential security issue (consider passwords entered by the end... Hynek Cihlar

05:59 AM Bug #11327: implement size limited "chunking" for bulk data transfer between client and server: Greg Shah wrote:
> 1. Identify all the cases where this can occur.
This can be done by looking at all the network e... Constantin Asofiei
05:48 AM Bug #11327: implement size limited "chunking" for bulk data transfer between client and server: I will take a look, thanks! Teodor Gorghe
05:45 AM Bug #11327: implement size limited "chunking" for bulk data transfer between client and server: Teodor, I think we need this next. Constantin Asofiei

09:20 AM Feature #10451: GUI interaction event logging: I performed some initial testing and it appears to work as expected. I'll continue with more extensive testing once i... Paula Păstrăguș
08:05 AM Feature #10451: GUI interaction event logging: I rebased 10451a, new rev is *16521*. (is should have been 16520, but the last rev contains a small rebase fix). Paula Păstrăguș
06:44 AM Feature #10451 (Review): GUI interaction event logging: Addressed review as rev *16139*.
Next, I'll rebase the branch to retest the behavior. Paula Păstrăguș
08:37 AM Bug #11271: server-side streams and files with frames/redirected terminal: Branch 11271d fixes a conversion problem: FileSystemDaemon is used in conversion by .xpxg analysis (for OpenClient). ... Constantin Asofiei

03:36 AM Bug #11271: server-side streams and files with frames/redirected terminal: Greg Shah wrote:
> Is the testcase from #11271-7 a common pattern? Should we just complete the implementation of a ... Hynek Cihlar
03:32 AM Feature #11371: full server-side support of FWD clients: The initial work on running client-side UI in server context was implemented in 9055a. It added very limited set of u... Hynek Cihlar
02:50 AM Feature #10451 (WIP): GUI interaction event logging: *Code review 10451a revisions 16134..16138*
* *[MAJOR]* _functional_ @ButtonListGuiImpl.Item@.@toString@: @textWidge... Hynek Cihlar

01:44 PM Feature #11371: full server-side support of FWD clients: OK, go ahead with the REST API. Greg Shah
01:37 PM Feature #11371: full server-side support of FWD clients: Greg Shah wrote:
> I would generally prefer that. But I want to make sure that we plan for the most likely usage sc... Constantin Asofiei
10:13 AM Feature #11371: full server-side support of FWD clients: I would generally prefer that. But I want to make sure that we plan for the most likely usage scenario. How would i... Greg Shah
03:03 AM Feature #11371: full server-side support of FWD clients: Constantin Asofiei wrote:
> Instead, the solution will be to provide FWD Java APIs to launch a batch process fully s... Constantin Asofiei
03:02 AM Feature #11371: full server-side support of FWD clients: Batch processes can be made to work similar to PASOE agents, full server-side, assuming that there is no need of inte... Constantin Asofiei
02:56 AM Feature #11371 (New): full server-side support of FWD clients: Constantin Asofiei
05:24 AM Bug #11271: server-side streams and files with frames/redirected terminal: Branch 11271c was merged to trunk rev 16511 and archived. Constantin Asofiei
05:22 AM Bug #11271: server-side streams and files with frames/redirected terminal: Branch 11271c was created from trunk rev 16510. In rev 16511 it contains:
* If any context does not have ALL server... Constantin Asofiei

11:26 AM Bug #2994: use static code analysis to scan p2j source for security vulnerabilities (Java, Javasc...: In addition to running static code analysis, we should extend this analysis to use the latest AI LLMs to perform vuln... Greg Shah
08:25 AM Bug #11271: server-side streams and files with frames/redirected terminal: Constantin Asofiei wrote:
> Greg Shah wrote:
> > > I think we need to plan for server-side redirected terminal (and... Greg Shah
06:56 AM Bug #11271: server-side streams and files with frames/redirected terminal: Greg Shah wrote:
> > I think we need to plan for server-side redirected terminal (and thus frames) rather sooner tha... Constantin Asofiei
04:17 AM Bug #11271 (Test): server-side streams and files with frames/redirected terminal: Branch 11271b was merged to trunk rev 16508 and archived. Constantin Asofiei
04:20 AM Bug #11325: JVM shutdown hooks executed on FWD server, but they belong to the FWD client: Sergey, review for 11325a rev 16495:
* I'm OK with the changes, but please rebase
* we also need to ensure when ser... Constantin Asofiei

08:17 AM Bug #11325 (Review): JVM shutdown hooks executed on FWD server, but they belong to the FWD client: Please review 16495 (11325a). Sergey Ivanovskiy

06:02 AM Bug #11348 (New): require all sessions that authenticate via certificate to use a secure transport: Greg Shah

Also available in: Atom

FWD » Core Development » Runtime Infrastructure