[OpenLayers-Users] Problem with cross-origin

[dabraham]

I just want to add a feature for my application that would allow users to
add any WFS/WPS/etc servers. I didn't realize the open-proxy problem.
Thanks for clarifying this issue.


2014-07-21 5:15 GMT+02:00 Phil Scadden [via OSGeo.org] <
ml-node+s1560n5152005h61 at n6.nabble.com>:

>
> > Is there any way to allow each host? Not only those from the
> allowedHosts
> > array.
> >
> > Or is possible to add host to this array via OpenLayers?
> >
> You have to do this with server-side code. You need to be very careful
> with security since you dont want to give someone a way to turn this
> into an open proxy? I gather this is so you can give users a way to add
> layers from arbitrary server to a map? If so, then you need a much more
> expanded proxy application. You should pass the URL to add to a handler
> which can then check for a valid getCaps response before adding the
> server to the allowed list. You need to think about persistence as well.
> No simple answers and any code is highly dependent on your server side
> environment.
>
> Notice: This email and any attachments are confidential.
> If received in error please destroy and immediately notify us.
> Do not copy or disclose the contents.
>
> _______________________________________________
> Users mailing list
> [hidden email] <http://user/SendEmail.jtp?type=node&node=5152005&i=0>
> http://lists.osgeo.org/mailman/listinfo/openlayers-users
>
>
> ------------------------------
>  If you reply to this email, your message will be added to the discussion
> below:
>
> http://osgeo-org.1560.x6.nabble.com/Problem-with-cross-origin-tp5151993p5152005.html
>  To unsubscribe from Problem with cross-origin, click here
> <http://osgeo-org.1560.x6.nabble.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=5151993&code=ZG9taW5pa2FicmFoYW1AZ21haWwuY29tfDUxNTE5OTN8LTE0MzkwMzQyNTY=>
> .
> NAML
> <http://osgeo-org.1560.x6.nabble.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>
>




--
View this message in context: http://osgeo-org.1560.x6.nabble.com/Problem-with-cross-origin-tp5151993p5152169.html
Sent from the OpenLayers Users mailing list archive at Nabble.com.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.osgeo.org/pipermail/openlayers-users/attachments/20140721/b105c7f8/attachment.html>