Re: Compact Policies and JSP

You can use the w3c's P3P validator to check whether
headers are being sent. Look at step 2 in the validator's report.
You may not be able to do this if there are redirects so you
can't get the validator to look at the URL in question. In that
case I recommend using the GNU wget utitlty (available from
http://www.gnu.org/software/wget/) and using the
wget -S flag. I'm told that cURL (which is included in some
Linux and BSD distributions) will also do this.

Lorrie

--
Lorrie Faith Cranor - http://lorrie.cranor.org/
P3P Specification Working Group Chair - http://www.w3.org/p3p/
New book: Web Privacy with P3P - http://p3pbook.com/



----- Original Message ----- 
From: "Adam van den Hoven" <list@adamvandenhoven.com>
To: "P3P Mailing List" <www-p3p-policy@w3.org>
Sent: Friday, October 25, 2002 4:44 PM
Subject: Compact Policies and JSP


> Hi!
>  
> I need a little help. I've been tasked to add p3p to our application and
> I've got the majority of the work done. That is to say that once our
> clients give us their policies I'm setup to put them in their well known
> locations and update the reference file. 
>  
> However, I need a hand with the header part. I have the following JSP
> code:
>  
>         response.addHeader("P3P", "CP=\"ALL DSP COR CURa ADMa DEVa PSAa
> PSDa CONi TELi OTPo OUR SAMa UNRa OTRa LEG IND PHY ONL FIN COM NAV INT
> DEM HEA GOV\"");
>  
> Or rather, its what I'd have if I didn't pull the header value from a
> property file. Unfortunately, I'm not sure if the header is being sent
> (or even if its the right one). I can't get any reaction out of IE
> regardless of my security level or the outrageous things I claim to do
> with the data. 
> 
> 
> H. Adam van den Hoven
> 
> Web Developer
> 
> Credit Union Central of BC
> 
> p 604 7306380
> 
> e avandenhoven@cucbc.com
> 
>  
>

Received on Monday, 28 October 2002 14:59:19 UTC