RE: wcf web service cross domain woes

Though ComponentOne has a Silverlight DataSet/DataTable implementation that
some converters use ; <

 

 

Thanks,

Shawn Wildermuth

 <http://wildermuth.com/> http://wildermuth.com

 

From: [email protected]
[mailto:[email protected]] On Behalf Of Don Demsak
Sent: Tuesday, January 26, 2010 1:43 PM
To: [email protected]
Subject: Re: [OT] wcf web service cross domain woes

 

  

Plus, they did the right thing and killed the DataSet in Sliverlight ;)

On Mon, Jan 25, 2010 at 10:00 AM, Shawn Wildermuth
<[email protected]> wrote:

  

Cross domain in Silverlight specifically needs permission (via an XML file
on the remote domain). This is to prevent the kind of access you see with
cross site scripting. When you call from your server, you have an IP address
to track back to if you're doing bad.but if its in the client, its much
harder to track.

 

As for RIA v. Database.  Silverlight is an Internet client stack, thus its
simply not a good idea to start opening up Firewall ports to your database.
MS's exclusion of this (and the small size of the framework) tells me they
didn't want a repeat of the open SQL Server access that was rampant in the
90's.   RIA Services, WCF Data Services and Web Services can all create
abstractions of the database, but not allow full access to the database (or
if well written prevent problems like SQL injections and the like). 

 

Thanks,

Shawn Wildermuth

 <http://wildermuth.com/> http://wildermuth.com

 

From: [email protected]
[mailto:[email protected]] On Behalf Of Steve Richter
Sent: Sunday, January 24, 2010 12:56 PM


To: [email protected]

Subject: Re: [OT] wcf web service cross domain woes

 

  

On Sun, Jan 24, 2010 at 12:42 PM, Walter Crosby <wcrosby-FrUbXkNCsVf2fBVCVOL8/[email protected]
<mailto:wcrosby%40alum.mit.edu> > wrote:
>
>
>
> Why not use the RIA Services stuff to handle this?

thanks for the tip. That is next on my learning agenda.

I am curious to know why it is ok to access a database thru RIA
services from a Silverlight client, but not ok to access the database
directly?