Thanks Nick, 

Then how can I modify the apache guacamole client , so no one can access to 
active session link from outside.

> On 1 Jun 2022, at 20:34, Nick Couchman <vn...@apache.org> wrote:
> 
> 
>> On Wed, Jun 1, 2022 at 12:54 PM Suat Toksöz <stok...@gmail.com> wrote:
> 
>> So, what is your suggestion for me to edit admin active session tab?
>> 
> 
> Creating a custom extension and using the HTML replace functionality is the 
> best way to make sure that your changes are future-proof - the base of 
> Guacamole Client can stay unmodified, which means upgrades won't require any 
> re-application of changes.
> 
> That said, you should be advised that simply hiding the HTML link for the 
> admin doesn't mean that that the functionality is disabled - someone with 
> knowledge of the Guacamole code and how the links are generated could 
> retrieve the link and access the session, anyway. Removing the HTML link is 
> just "security by obscurity."
> 
> -Nick

Reply via email to