Re: wcf web service cross domain woes

Plus, they did the right thing and killed the DataSet in Sliverlight ;)

On Mon, Jan 25, 2010 at 10:00 AM, Shawn Wildermuth <
[email protected]> wrote:

>
>
> Cross domain in Silverlight specifically needs permission (via an XML file
> on the remote domain). This is to prevent the kind of access you see with
> cross site scripting. When you call from your server, you have an IP address
> to track back to if you’re doing bad…but if its in the client, its much
> harder to track.
>
>
>
> As for RIA v. Database.  Silverlight is an Internet client stack, thus its
> simply not a good idea to start opening up Firewall ports to your database.
> MS’s exclusion of this (and the small size of the framework) tells me they
> didn’t want a repeat of the open SQL Server access that was rampant in the
> 90’s.   RIA Services, WCF Data Services and Web Services can all create
> abstractions of the database, but not allow full access to the database (or
> if well written prevent problems like SQL injections and the like).
>
>
>
> Thanks,
>
> Shawn Wildermuth
>
> http://wildermuth.com
>
>
>
> *From:* [email protected] [mailto:
> [email protected]] *On Behalf Of *Steve Richter
> *Sent:* Sunday, January 24, 2010 12:56 PM
>
> *To:* [email protected]
> *Subject:* Re: [OT] wcf web service cross domain woes
>
>
>
>
>
> On Sun, Jan 24, 2010 at 12:42 PM, Walter Crosby <wcrosby-FrUbXkNCsVf2fBVCVOL8/[email protected]<wcrosby%40alum.mit.edu>>
> wrote:
> >
> >
> >
> > Why not use the RIA Services stuff to handle this?
>
> thanks for the tip. That is next on my learning agenda.
>
> I am curious to know why it is ok to access a database thru RIA
> services from a Silverlight client, but not ok to access the database
> directly?
>
>  
>