Will investigate security filter chains. Thanks for pointing this out.

Edward

Date: Mon, 15 Jun 2015 11:28:25 +0200
Subject: Re: [Geoserver-users] Disable client-side SLDs
From: [email protected]
To: [email protected]
CC: [email protected]; [email protected]

Ups, forgot about the sld URL Parameter.
Mauro started a thread on the mailing list concerning url parameters and filter 
chains.
http://sourceforge.net/p/geoserver/mailman/message/34204840/

Maybe this could be a solution, but the proposed "general solution"  sounds 
better.
CheersChristian


On Mon, Jun 15, 2015 at 11:16 AM, Andrea Aime <[email protected]> 
wrote:
On Mon, Jun 15, 2015 at 11:13 AM, Christian Mueller 
<[email protected]> wrote:
Hi Edward
AFAIK client side SLD uses a HTTP POST Request. I think it is possible to add a 
specific security filter chain and disable the POST request.
You can also pass a "&sld=http://url/to/your/sld"; in a GET request, and stand 
up a HTTP server that will giveGeoServer the SLD you desired. Has been used 
quite a bit by people standing up a front/side application that does statistics 
over data tocreate dynamic thematic maps.
CheersAndrea
-- 
==GeoServer Professional Services from the experts! Visithttp://goo.gl/it488V 
for more information.==

Ing. Andrea Aime 
@geowolfTechnical Lead
GeoSolutions S.A.S.Via Poggio alle Viti 118755054  Massarosa (LU)Italyphone: 
+39 0584 962313fax: +39 0584 1660272mob: +39  339 8844549
http://www.geo-solutions.ithttp://twitter.com/geosolutions_it
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i 
file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo 
è consentito esclusivamente al destinatario del messaggio, per le finalità 
indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne 
il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di 
procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro 
sistema. Conservare il messaggio stesso, divulgarlo anche in parte, 
distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, 
costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.
 
The information in this message and/or attachments, is intended solely for the 
attention and use of the named addressee(s) and may be confidential or 
proprietary in nature or covered by the provisions of privacy act (Legislative 
Decree June, 30 2003, no.196 - Italy's New Data Protection Code).Any use not in 
accord with its purpose, any disclosure, reproduction, copying, distribution, 
or either dissemination, either whole or partial, is strictly forbidden except 
previous formal approval of the named addressee(s). If you are not the intended 
recipient, please contact immediately the sender by telephone, fax or e-mail 
and delete the information in this message that has been received in error. The 
sender does not give any warranty or accept liability as the content, accuracy 
or completeness of sent messages and accepts no responsibility  for changes 
made after they were sent or for other risks which arise as a result of e-mail 
transmission, viruses, etc.

-------------------------------------------------------



-- 
DI Christian Mueller MSc (GIS), MSc (IT-Security)OSS Open Source Solutions GmbH

                                          
------------------------------------------------------------------------------
_______________________________________________
Geoserver-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to