I am wondering if there is a way to hide the actual URL in the browser address box when using @URLOpen. There is potentially sensitive data that is used to build the URL and I’d like to make sure anyone “looking over the shoulder” of the user won’t see the URL path I create. Hiding or giving it an alias would both be an option. Thanks!
Subject: Hide URL Address when using @URLOpen?
No. You could use a window.open() call to open a chromeless window without an address bar, but that’s not a good solution either. No matter how you look at it, there shoudl never be “sensitive data” in the URL. If you have anything sensitive to send to the server, then POST it (send it as submitted form fields) rather than passing it in a URL, and do that through SSL/HTTPS. You can POST directly to an agent, or to a form that uses a WebQuerySave agent or even a $$Return field (depends on how you want to work it) to get you to where you want to go. And the sensitive data will not be visible in the address bar – or in the browser’s history.