cocoon-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From giacomo <giac...@apache.org>
Subject Re: [c1] Cocoon / Tomcat / XSL Files
Date Tue, 25 Sep 2001 19:28:50 GMT
On Tue, 25 Sep 2001, Sergio Carvalho wrote:

>
> If you are using apache on the frontend, you can use mod_rewrite to forbid any
> ^.*xsl$ request. See the URL rewriting guide:
>  http://httpd.apache.org/docs/misc/rewriteguide.html

As Cocoon2 is controlling its hole URI space in the sitemap you can
easily verify if *.xsl files will be accessable through Cocoon by taking
a look into the sitemaps matcher elements.

Giacomo

>
> On Tue, 25 Sep 2001 13:53:09 -0400, Brent L Johnson wrote:
> From: "Brent L Johnson" <brent@bjohnson.net>
> --
>
> > I'm not sure this is really the best mailing list to direct this to - but
> > since it is directly related to Cocoon I'll try anyways.
> >
> > I'm using ESQL in many different documents for reading info out of a
> > database.  The problem is, the database username and passwords are stored in
> > cleartext in the XSL document, and someone could simply read the HTML source
> > and pick out the namespaces and read the XSL documents (thus getting access
> > to not only the code used to create most of the dynamic pages, but DB
> > usernames and passwords).
> >
> > Does anyone know if I can restrict access to .xsl files using Apache +
> > Tomcat + Cocoon1 ??
> >
> > Thanks,
> >
> > - Brent
> >
> >
> > ---------------------------------------------------------------------
> > Please check that your question has not already been answered in the
> > FAQ before posting. <http://xml.apache.org/cocoon/faqs.html>
> >
> > To unsubscribe, e-mail: <cocoon-users-unsubscribe@xml.apache.org>
> > For additional commands, e-mail: <cocoon-users-help@xml.apache.org>
> >
>
>
> --
> Sergio Carvalho
> ---------------
> sergio.carvalho@acm.org
>
> If at first you don't succeed, skydiving is not for you
>
> ---------------------------------------------------------------------
> Please check that your question has not already been answered in the
> FAQ before posting. <http://xml.apache.org/cocoon/faqs.html>
>
> To unsubscribe, e-mail: <cocoon-users-unsubscribe@xml.apache.org>
> For additional commands, e-mail: <cocoon-users-help@xml.apache.org>
>
>
>
>


---------------------------------------------------------------------
Please check that your question has not already been answered in the
FAQ before posting. <http://xml.apache.org/cocoon/faqs.html>

To unsubscribe, e-mail: <cocoon-users-unsubscribe@xml.apache.org>
For additional commands, e-mail: <cocoon-users-help@xml.apache.org>


Mime
View raw message