On Thu, 24 Oct 2002, Sandro Zic wrote:
> In general, I think that BXE developers should very much take care of such
> aspects, because BXE is a client-side application well suited for distributed
> systems, especially because it works with XML. Adding XInclude or XPointer to
> BXE should make it ready for distributed content editing, at least to include
> XML fragments from other hosts into a new XML document created with BXE. This
> is where we see the strength of BXE: to work as a client-side, browser-based
> WISYWIG editor for collaborative content creation in distributed groups of
> interest - uuhh, too many buzzwords here :)
loading xml from different hosts will never work by default with mozilla.
The most proper solution is certainly to sign your script and let the user
decide, if he wants to load something from a different server (and if he
trusts you :) ). The problem here is, that it's worth almost nothing if we
provide signed script, since if you change something in the js scripts,
it's not valid anymore. Therefore you could not customize BXE or add more
functionality without having to sign it again. But I assume, if you just
change the XML Files (like config, schema, xslt and naturally the xml with
the content itself), it should not have to be resigned :)
The more uglier, but almost unrecognizable solution is the proxy solution.
Just redirect every request to a proxy-script on the origin server. BXE
has some precautions to allow that, mostly the "prefix" param in the
the inc/config.xml file
chregu
>
> > Thanks to a hint by brian, I found this extensive documentation about
> > security and signing in mozilla:
> >
> > http://books.mozdev.org/chapters/ch12.html#77088
> >
> > The other chapters are worth reading as well, by the way :)
>
> Yes, the book is excellent!
>
> --Sandro
>
--
christian stocker | bitflux GmbH | schöneggstrasse 5 | ch-8004 zurich
phone +41 1 240 56 70 | mobile +41 76 561 88 60 | fax +41 1 240 56 71
http://www.bitflux.ch | chregu@xxxxxxxxxx | gnupg-keyid 0x5CE1DECB
--
bx-editor-dev mailing list
bx-editor-dev@xxxxxxxxxxxxxxxx
http://lists.bitflux.ch/cgi-bin/listinfo/bx-editor-dev
|
