Skip to main content

Ideas

Filter by idea status

10000+ Ideas

Khushboo_Kalia
Adobe Employee
Khushboo_KaliaAdobe Employee

Adobe Target: Why DOCTYPE is required on the webpageDeclined

Missing DOCTYPE declaration on a webpage often disables the Adobe Target library, without which the personalization is not possible on your site pages.Target library at.js requires the HTML5 doctype. The syntax is: <!DOCTYPE html>.HTML DOCTYPE must be the very first thing in your HTML document before the HTML tags. It acts as an instruction to the web browser about the version of the markup language in which the page is written.Initially, the Doctype declaration was used in HTML when it was defined as a language based on SGML and later XML. Since the presence of that declaration was in general a signal that the document author followed the standard practices and then this declaration was used in HTML5 to distinguish between standards-complaint parsing mode and a so-called quirk parsing mode.The HTML5 doctype ensures that the page loads in standard mode. Some JavaScript APIs gets disabled when a site page loads in quirks mode. Target library also depends on some JS APIs which gets disabled with quirks mode.           Whether the document is parsed in standard mode or quirks mode, or simply parsing the same way across HTML5 processors, the doctype is a critical component of a quality HTML document.In the past, the declaration was passive – ignored by the browser until you’d validate the document where the validator would use the DOCTYPE declaration to compare your document with the declared Document Type Definition (DTD). But with the technology known as DOCTYPE switching has made using the correct DOCTYPE declaration not only important, but imperative. On finding a correct DOCTYPE in the document, browsers allow page to render in standard mode.The idea here is to -understand how important is DOCTYPE Declaration on a webpage,what makes up a correct declaration, andmost importantly, including the correct DOCTYPE declaration in a page is required to enable Target libraries effectively.Hope this helps!Thanks,Khushboo Kalia

Gaurav_Singh_02Adobe Employee

Adobe Target: Why DOCTYPE is required on the webpageDeclined

Missing DOCTYPE declaration on a webpage often disables the Adobe Target library, without which the personalization is not possible on your site pages.Target library at.js requires the HTML5 doctype. The syntax is: <!DOCTYPE html>.HTML DOCTYPE must be the very first thing in your HTML document before the HTML tags. It acts as an instruction to the web browser about the version of the markup language in which the page is written.Initially, the Doctype declaration was used in HTML when it was defined as a language based on SGML and later XML. Since the presence of that declaration was, in general, a signal that the document author followed the standard practices and then this declaration was used in HTML5 to distinguish between standards-compliant parsing mode and a so-called quirk parsing mode.The HTML5 doctype ensures that the page loads in standard mode. Some JavaScript APIs gets disabled when a site page loads in quirks mode. Target library also depends on some JS APIs which gets disabled with quirks mode.           Whether the document is parsed in standard mode or quirks mode, or simply parsing the same way across HTML5 processors, the doctype is a critical component of a quality HTML document.In the past, the declaration was passive – ignored by the browser until you’d validate the document where the validator would use the DOCTYPE declaration to compare your document with the declared Document Type Definition (DTD). But with the technology known as DOCTYPE switching has made using the correct DOCTYPE declaration not only important, but imperative. On finding a correct DOCTYPE in the document, browsers allow page to render in standard mode.The idea here is to -understand how important is DOCTYPE Declaration on a webpage,what makes up a correct declaration, andmost importantly, including the correct DOCTYPE declaration in a page is required to enable Target libraries effectively.

AEMaCS Author: Prevent the caching of sensitive data in browserAccepted

Request for Feature Enhancement (RFE) Summary: Prevent the browser caching of (potentially) sensitive data (e.g. some personal data of the logged-in user) Use-case: AEMaCS Author sets the Cache-Control header with a directive that does not prevent the caching of sensitive data in the user’s browser. An attacker gaining access to the browser of a user with which sensitive information has been retrieved can get insights into the data by reading the cache. Current/Experienced Behavior: The application does not prevent the caching of (potentially) sensitive data. In the responses, the value of the Cache-Control header is set to ”no-cache”, as can be seen in the following screen- shot (please check the attached report.) The “no-cache” instruction only ensures that the browser validates that the content is up-to-date on the server before using the cache. A look into the browser cache shows that sensitive data (e.g. some personal data of the logged-in user) is stored there. Improved/Expected Behavior: Set the following caching directives for any response which contains sensitive information. Pragma: no-cache Cache-Control: no-cache Cache-Control: no-store Most web browsers and proxy servers respect these directions and will not write data into their cache store. Environment Details (AEM version/service pack, any other specifics if applicable): AEMaCS Author Customer-name/Organization name:   Screenshot (if applicable):   Code package (if applicable):