Mailing-List: contact dev-help@cloudstack.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@cloudstack.apache.org
Received-SPF: pass (athena.apache.org: domain of rohit.yadav@shapeblue.com
 designates 213.199.154.20 as permitted sender)
From: Rohit Yadav <rohit.yadav@shapeblue.com>
To: dev <dev@cloudstack.apache.org>
CC: "shadowsor@gmail.com" <shadowsor@gmail.com>
Subject: [DISCUSS] Removing template URL format checking logic
Thread-Topic: [DISCUSS] Removing template URL format checking logic
Thread-Index: AQHPszFFF2R/dn4bgEupbl/zNGTS+w==
Date: Fri, 8 Aug 2014 17:50:41 +0000
Message-ID: <98F851FC-E116-4ED4-BB73-1B94DC9E4338@shapeblue.com>
Accept-Language: en-US
Content-Language: en-US
Content-Type: text/plain; charset="Windows-1252"
Content-ID: <CD25FE05676F134CB493CAC2A921FF7B@eurprd07.prod.outlook.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0

Hi,

With reference to https://issues.apache.org/jira/browse/CLOUDSTACK-5512 Mar=
cus and I think we should remove the template URL format checking logic bec=
ause:

- It does not handle pre-signed URL (say something that does not end with .=
vhd etc, but has bunch of http params)
- One can game the system by say renaming any file to respective format
- We dumb down, take whatever URL user gives and use the format they specif=
y in their register template API call

Marcus also notes that TemplateUtils utility would validate selected format=
.

Please discuss if you=92ve any use-case that can get affected by this?

Regards,
Rohit Yadav
Software Architect, ShapeBlue
M. +41 779015219 | rohit.yadav@shapeblue.com
Blog: bhaisaab.org | Twitter: @_bhaisaab


Find out more about ShapeBlue and our range of CloudStack related services

IaaS Cloud Design & Build<http://shapeblue.com/iaas-cloud-design-and-build/=
/>
CSForge =96 rapid IaaS deployment framework<http://shapeblue.com/csforge/>
CloudStack Consulting<http://shapeblue.com/cloudstack-consultancy/>
CloudStack Infrastructure Support<http://shapeblue.com/cloudstack-infrastru=
cture-support/>
CloudStack Bootcamp Training Courses<http://shapeblue.com/cloudstack-traini=
ng/>

This email and any attachments to it may be confidential and are intended s=
olely for the use of the individual to whom it is addressed. Any views or o=
pinions expressed are solely those of the author and do not necessarily rep=
resent those of Shape Blue Ltd or related companies. If you are not the int=
ended recipient of this email, you must neither take any action based upon =
its contents, nor copy or show it to anyone. Please contact the sender if y=
ou believe you have received this email in error. Shape Blue Ltd is a compa=
ny incorporated in England & Wales. ShapeBlue Services India LLP is a compa=
ny incorporated in India and is operated under license from Shape Blue Ltd.=
 Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and=
 is operated under license from Shape Blue Ltd. ShapeBlue SA Pty Ltd is a c=
ompany registered by The Republic of South Africa and is traded under licen=
se from Shape Blue Ltd. ShapeBlue is a registered trademark.