On 16/06/13 22:31, Till Steinmetz wrote: > Hi, > > wouldnt it make sense if it was possible to directly access the aliases > defined in > basedir/private/aliases from the web gui instead of only being able to access > directorys by uri, or did I oversee the option to do this?
It's not easy to make the aliases accessable from the web-UI without exposing them to cross-site scripting attacks. We may be able to support that by adding a "control panel" that requires authentication (and is either served from a different origin to file content or uses something like HTML5 sandbox to isolate it from other scripts), but that will require a lot of development effort. -- Daira Hopwood ⚥
signature.asc
Description: OpenPGP digital signature
_______________________________________________ tahoe-dev mailing list tahoe-dev@tahoe-lafs.org https://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-dev
