https://code.google.com/p/google-caja/issues/detail?id=1912
On Wed, Apr 30, 2014 at 10:30 AM, Mike Stay <[email protected]> wrote: > You should certainly host the server yourself. The server is > necessary for proxying external scripts and style tags. If you don't > plan on letting your users include external resources, then there's no > need to run the proxy, and the cajaserver location is just the > location of caja's .js files. > > Unfortunately, setting up the proxy is undocumented at the moment. > The best example of running a proxy server is the test server in > LocalServer.java. > > On Wed, Apr 30, 2014 at 7:12 AM, Tinus Sky <[email protected]> wrote: >> Good morning everybody, >> >> In my project my users upload content and format the uploaded content with a >> serverside template language, the formatted content is displayed as html in >> the user browser. Works nicely, but as usually the users want more >> flexibility. >> >> My thought was to allow javascript to format the uploaded content. This does >> provide more flexibility but introduces security concerns. >> >> I looked a bit around and found caja. I tested a bit and it looks nice. >> >> But i see there is a dependency on a caja server https://caja.appspot.com/ . >> >> Can i remove this dependency by hosting the caja server myself? >> >> I ask this because of the risk of vendor lock-in. And when i host it myself >> i can make better guarantees on the availability of this server. >> >> Kind regards, >> Tinus >> >> -- >> >> --- >> You received this message because you are subscribed to the Google Groups >> "Google Caja Discuss" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> For more options, visit https://groups.google.com/d/optout. > > > > -- > Mike Stay - [email protected] > http://www.cs.auckland.ac.nz/~mike > http://reperiendi.wordpress.com -- Mike Stay - [email protected] http://www.cs.auckland.ac.nz/~mike http://reperiendi.wordpress.com -- --- You received this message because you are subscribed to the Google Groups "Google Caja Discuss" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
