cocoon-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Stefano Mazzocchi <stef...@apache.org>
Subject Re: sharing microsoft experience
Date Tue, 11 Dec 2001 00:30:00 GMT
Per Kreipke wrote:
> There's no need for this group to
> build everything end to end; define a rock solid, simple API and you'll see
> editors appearing quickly after.

Hmmm, not so sure about it: you have to implement at least one reference
implementation or your API will remain there forever unimplemented.
 
> Specifics: the newest tech in IE that I like is the ability to call web
> services (through 'behaviors'). If you take Stefano's granularity to the
> extreme, every editable XML atom on the 'page' should have associated
> get/set/edit implementations accessible through web services.

I've saw that and, don't ask me why, all my FS alarms went off at once:
it's a potentially great playground for hackers since the data entry
points are multiplied by a factor of ten or hundred.

Taking web service granularity to the single XML 'atom' (element or
attribute) is, IMO, FS squared. Appealing on paper, but waaaaaaay too
much freedom for you and normally this bites you back in the ass,
expecially on Microsoft software, with the form of security holes and
vulnerabilities.

Can you imagine the cross-site scripting problems with the above if some
IE bug is discovered?

Ah, don't make me think about it.

-- 
Stefano Mazzocchi      One must still have chaos in oneself to be
                          able to give birth to a dancing star.
<stefano@apache.org>                             Friedrich Nietzsche
--------------------------------------------------------------------



---------------------------------------------------------------------
To unsubscribe, e-mail: cocoon-dev-unsubscribe@xml.apache.org
For additional commands, email: cocoon-dev-help@xml.apache.org


Mime
View raw message