[Geomoose-users] Security and GeoMoose

[Brent Fraser]

I'd say it's more of an enhancement for GM 2.0.  And I'm not even sure its possible.

  While it is possible to have all relative links in the .js reference a GEOMOOSE_ROOT (e.g. var XSL_RESULTS = GEOMOOSE_ROOT+'xsl/results.xsl';), I don't know if it can be done in the .HTML.  I suppose you could code absolute paths in the .HTML (<link href="/GEOMOOSE_ROOT/shared/styles.css"  rel="stylesheet" type="text/css"/>), then add an alias for GEOMOOSE_ROOT in the Web Server.   Hmmm, maybe the .HTML doesn't matter as I can change those few links by hand for a particular site anyways.

  In dealing with my security implementation below, the problem I had was with the relative paths used 
through out the "compiled" GeoMoose JavaScript.  I could have changed them , but then upgrading the site (if there was ever a GM 1.7.0) would be a pain.  The solution would be to have a GEOMOOSE_ROOT set in the config.js (and have it set by default to "./"), and have all the GeoMoose JavaScript use GEOMOOSE_ROOT+ instead of hardcoding the relative path.

Thanks!
Brent Fraser


Dan Little wrote:
> What?! GeoMoose is not perfect? :-)
> 
> As of now ... send me an email and I will get it put in.  We are doing a "GeoMOOSE Code Sprint" next week and Jim, Brian, and I will be hitting the GM2.0 code VERY hard but I will try to find some time to fix some 1.6 bugs.
> 
> 
> ----- Original Message ----
>> From: Brent Fraser <bfraser at geoanalytic.com>
>> To: geomoose-users at lists.sourceforge.net
>> Sent: Wednesday, April 1, 2009 2:14:08 PM
>> Subject: Re: [Geomoose-users] Security and GeoMoose
>>
>> So where can I file a GeoMoose bug, I mean enhancement request?
>>
>> Thanks!
>> Brent
>>
>> Brent Fraser wrote:
>>>   I'm implementing Geomoose on a site that uses server-side scripting (asp) to 
>> check credentials and deliver content.  So instead of allowing direct access to 
>> statedemo.html (or mapserv.exe), there's a statedemo.asp in a different web 
>> directory that rea
>>> ds statedemo.html from the filesystem and sends it to the browser (via IIS).  
>> Since the ASP is in a different directory, the relative URLs in the GeoMoose are 
>> invalid.  
>>>   It would be nice if there was a way to easily set something like 
>> "GEOMOOSE_ROOT" in the XML (an enhancement for GM2?).
>>>   BTW, I was able to solve the problem using a rewrite ISAPI filter on IIS 
>> (the equivalent of apache's mod_rewrite).
>>> Thanks!
>>> Brent Fraser
>>>
>>> ------------------------------------------------------------------------------
>>> _______________________________________________
>>> Geomoose-users mailing list
>>> Geomoose-users at lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/geomoose-users
>>>
>> ------------------------------------------------------------------------------
>> _______________________________________________
>> Geomoose-users mailing list
>> Geomoose-users at lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/geomoose-users
> 
> 
> 
>       
>