Remoting and other app security concerns - shale 1.0.3

2007-01-16 Thread Costa Basil
Today, I added some code for calling bean methods from ajax via shale remoting and to my wonder I discovered the mechanisms for executing bean calls are enabled by default. I don't think this is right. I think they should be disabled by default, and they should be enabled once the

Re: Remoting and other app security concerns - shale 1.0.3

2007-01-16 Thread Craig McClanahan
On 1/16/07, Costa Basil [EMAIL PROTECTED] wrote: Today, I added some code for calling bean methods from ajax via shale remoting and to my wonder I discovered the mechanisms for executing bean calls are enabled by default. I don't think this is right. I think they should be disabled by default,