Re: [xwt-users]Security, connection to servers
Adam Megacz <[email protected]>
| Newsgroups | gmane.comp.java.xwt.users |
|---|---|
| Organization | XWT |
| Message-ID | <[email protected]> |
The authoritative source for the answer to this question is the reference. It and the source code both limit you to only the IP address the xwar came from. This is the intended behavior; allowing any IP address would create a severe security hole. - a Eric Merritt <cyberlync-/[email protected]> writes: > --- Brian Alliet <[email protected]> wrote: > > From: "Eric Merritt" <cyberlync-/[email protected]> > > > > > No, when an xwar is loaded from an intranet > > > > location it can connect to > > > > > anything. > > > > > > This is what I would think it would be. > > > > > > > Nope, he was right. It can just connect to the > > host > > > > where the xwar came > > > > from. > > > > > > So which is it? > > > > Well, according to the source, xwars loaded from > > private ip ranges can only > > connect to the server they came from. See HTTP.java, > > resolveAndCheckIfFirewalled. > > > > > http://cvs.xwt.org/xwt/src/org/xwt/HTTP.java?rev=1.31&content-type=text/x-cv > > sweb-markup > > > > Arghh, I guess I could put together a little patch > for that, that I could apply to the local launcher. > hmmm, I will have to look into that. > > __________________________________ > Do you Yahoo!? > SBC Yahoo! DSL - Now only $29.95 per month! > http://sbc.yahoo.com > > _______________________________________________ > users mailing list > [email protected] > http://lists.xwt.org/listinfo/users > --