Ok, now I fully understand, thanks for the explanations!
--Sandro
On Friday 25 October 2002 08:31, Christian Stocker wrote:
> On Thu, 24 Oct 2002, Sandro Zic wrote:
> > In general, I think that BXE developers should very much take care of
> > such aspects, because BXE is a client-side application well suited for
> > distributed systems, especially because it works with XML. Adding
> > XInclude or XPointer to BXE should make it ready for distributed content
> > editing, at least to include XML fragments from other hosts into a new
> > XML document created with BXE. This is where we see the strength of BXE:
> > to work as a client-side, browser-based WISYWIG editor for collaborative
> > content creation in distributed groups of interest - uuhh, too many
> > buzzwords here :)
>
> loading xml from different hosts will never work by default with mozilla.
> The most proper solution is certainly to sign your script and let the user
> decide, if he wants to load something from a different server (and if he
> trusts you :) ). The problem here is, that it's worth almost nothing if we
> provide signed script, since if you change something in the js scripts,
> it's not valid anymore. Therefore you could not customize BXE or add more
> functionality without having to sign it again. But I assume, if you just
> change the XML Files (like config, schema, xslt and naturally the xml with
> the content itself), it should not have to be resigned :)
>
> The more uglier, but almost unrecognizable solution is the proxy solution.
> Just redirect every request to a proxy-script on the origin server. BXE
> has some precautions to allow that, mostly the "prefix" param in the
> the inc/config.xml file
>
> chregu
>
> > > Thanks to a hint by brian, I found this extensive documentation about
> > > security and signing in mozilla:
> > >
> > > http://books.mozdev.org/chapters/ch12.html#77088
> > >
> > > The other chapters are worth reading as well, by the way :)
> >
> > Yes, the book is excellent!
> >
> > --Sandro
--
bx-editor-dev mailing list
bx-editor-dev@xxxxxxxxxxxxxxxx
http://lists.bitflux.ch/cgi-bin/listinfo/bx-editor-dev
|
