Hi Stephan,

Stephan Bergmann wrote:

> Jan Holesovsky wrote:
>> Hi Mathias,
>> 
>> On Wednesday 02 of April 2008, Mathias Bauer wrote:
>> 
>>>> Hi, I'm new to Calc, and fascinated by its power, but while using "Link
>>>> to External Data" to get realtime stock quote, the website asks me to log
>>>> in first, would you mind telling me how to type username/password when
>>>> importing external data? Thanks. - psist -
>>> I assume that "external data" shall mean "http". In ftp you could use
>>> the "user:[EMAIL PROTECTED]" syntax, not sure if this is possible for http.
>> 
>> Unfortunately not until the CWS webdavandgvfslocking1 which changes 
>> tools/source/fsys/urlobj.cxx to support the user and password for http as 
>> well.
> 
> HTTP URLs never allowed for a user:password part (see RFCs 1738, 2616), 
> and probably for good reason:  'Some URL schemes use the format 
> "user:password" in the userinfo field. This practice is NOT RECOMMENDED, 
> because the passing of authentication information in clear text (such as 
> URI) has proven to be a security risk in almost every case where it has 
> been used.' [http://www.rfc-editor.org/rfc/rfc2396.txt]
> 
> Anyway, if you do change behavior of protocols or add new protocols at 
> tools/source/fsys/urlobj.cxx, please remember to update the grammar 
> documentation at the top of the file.

Should we take your mail as a suggestion not to add this feature to the UCB?

In this case the Calc team should get a bug report to make sure that
external data always is loaded with providing an interaction handler, so
that a password dialog can be shown when needed.

Ciao,
Mathias

-- 
Mathias Bauer (mba) - Project Lead OpenOffice.org Writer
OpenOffice.org Engineering at Sun: http://blogs.sun.com/GullFOSS
Please don't reply to "[EMAIL PROTECTED]".
I use it for the OOo lists and only rarely read other mails sent to it.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to