Hi Andrew I can see the security issue here, and I thank you for your time.
I final word then. But in my situation bobfiles.com and evil.eve.com are the same app. I'm using apache to virtual host this app so that www.mysite.com and www.mysite.co.uk go to the same web application. Do you have another way I can co-host without using the request.getServerName. I cannot use a static property because only in site will work, and I don't want to double deploy my site. Thanks Dom _______________________________________________ Yale CAS mailing list [email protected] http://tp.its.yale.edu/mailman/listinfo/cas
