I definitely agree that we should protect the capabilities document. Though
I think this is not normally an issue because if anyone tries to configure
something that doesn't work then GeoServer doesn't let you. So the only
ones that can get in are when the data directory is misconfigured from the
start. Like I wouldn't be able to add in the faulty pk50095 layer.
So for the immediate term (like RC1) let's disable pk50095. People can
choose to enable it if they want, but then by default we're not giving bad
capabilities documents in tomcat.
On Thu, Jan 13, 2011 at 3:20 AM, Andrea Aime
<[email protected]>wrote:
> On Thu, Jan 13, 2011 at 8:43 AM, Gabriel Roldán <[email protected]>
> wrote:
> > On Thu, 2011-01-13 at 08:35 +0100, Andrea Aime wrote:
> >> On Wed, Jan 12, 2011 at 10:56 PM, Chris Holmes <[email protected]>
> wrote:
> >> > Hmmm... So there's nothing we can do to code around it at the
> GeoServer or
> >> > GeoTools level.
> >> >
> >> > How about we just remove that layer from the default data? It seems
> to be
> >> > the only one affected. I feel like it'd be good to make a better
> impression
> >> > on the latest tomcats than bombing on any WMS Capabilities request,
> and then
> >> > having to adjust some obscure settings. Most users will just move on
> to
> >> > another product by that time.
> >>
> >> What I'm wondering more is why the WMS 1.3 capabilities transformer
> tries
> >> to perform data access to start with (getting a reader)
> >> Do we do the same for the WMS 1.1 one?
> > same thing for 1.1.1. It's getting it to ask for the time and elevation
> > metadata. Would be good to have that as part of resource info instead.
>
> Indeed. Reader access might mean database connections and whatnot,
> it's risky.
> If not in the resource, at the very least guard that part and avoid having
> it
> break the caps generation.
>
> Cheers
> Andrea
>
> --
> Ing. Andrea Aime
> Technical Lead
>
> GeoSolutions S.A.S.
> Via Poggio alle Viti 1187
> 55054 Massarosa (LU)
> Italy
>
> phone: +39 0584962313
> fax: +39 0584962313
>
> http://www.geo-solutions.it
> http://geo-solutions.blogspot.com/
> http://www.linkedin.com/in/andreaaime
> http://twitter.com/geowolf
>
> -----------------------------------------------------
>
------------------------------------------------------------------------------
Protect Your Site and Customers from Malware Attacks
Learn about various malware tactics and how to avoid them. Understand
malware threats, the impact they can have on your business, and how you
can protect your company and customers by using code signing.
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Geoserver-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-devel
