cocoon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Berin Loritsch" <>
Subject Re: [C2][OT] Input Streaming?
Date Thu, 09 Nov 2000 21:34:46 GMT
----- Original Message ----- 
From: "dima" <>
To: <>
Sent: Thursday, November 09, 2000 3:34 PM
Subject: [C2][OT] Input Streaming?

>  I am just wondering...
>  With all it's pros and cons Cocoon1 as well as Cocoon2 are nevertheless
> extremely dependent on physical input sources. I mean you just have to
> have those XML files somewhere in your document tree, else the whole thing
> becomes somewhat meaningless, which I find quite limiting.
>  In the light of a very recent discussion on sitemap architecture, would
> anyone think it may be useful to add in another generator that accepts/
> parses InputStreams into Cocoon2?
>  Any thoughts on the subject would be appreciated :).

As long as those input streams can be limited to known entities, anything is
possible.  The problem with that approach (remember ProducerFromRequest?) is
that if you are processing the stream and it gets translated to a database
or other business critical system we have a big security risk.  I know that
from the limited experience I have had with stringent customer security
requirements, that something like that would not be permitted on GP.  If we
have the ability to easily control where that stream originated from and
can properly authenticate it, then it would be doable.  In short, if the
stream can't be encrypted and authenticated it is too dangerous for mission
critical installations.  If that ability were added with no controls many
places would have to create a different distribution that didn't contain
the classes or simply forgo Cocoon.

View raw message