 |
|
| Domino Tips: |
|
|
|
SPAM AND SECURITY
Alittle More About Web Securing Views
Dan Melamed, Tamir Ben Shoshan
07.06.2000
Rating: -4.00- (out of 5)
So now that you've already set the $$Defaultviewtemplete (and
$$ViewTemplate(s) and the $$SearchViewTemplate (and $$SearchTemplate(s) you may
think your app is rather secured from web "sophisticated" users, or shall I
say, programmers.
well, it is NOT.Domino R5 started supporting XML.
For example :
http://www.lotus.com/news/news.nsf/public
they've set a $$ViewTemplate do disallow you from going there.
However ... if you go to
http://www.lotus.com/news/news.nsf/public?readviewentries
you will get to the XML Version of the View which is wide open. you can
see everything you would've seen in the view.
Fix for that ?
Since not all browsers (actually a minority of them) truely supports XSL, the
only thing you could do, really, is to set the reader field ..
I've already addressed Lotus about this Issue. no reply...
so this is not really a tip, but a request for .. maybe someone talented that
will solve this :)
|
|
|
|
|
|
|
|
| TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of . |
|
| |
All Rights Reserved, , TechTarget |
|
|
|
|
|
