Ed Knutson wrote:
> 
> Two other things:
> 
> -Cache filenames and '..'
> The new Linux kernel has an httpd module.  As a security feature, it refuses to 
>serve any file that has '..' in its name.  (This prevents requests to, say 
>../../../etc/passwd).  How about if we use - instead of . in the filenames?  Khttpd 
>is so fast it's almost sad and it would be a shame if we couldn't use it on Linux 
>systems.

I wouldn't mind taking in a patch for this.  It is a stupid hack just to
except no ".." characters though.  Someday khttpd will have to be fixed.
 
> -Portlet state....
> So far, looks like we have:
> minimized (titlebar only)
> maximized (full screen, full detail)
> normal (fits into table, ? detail)
> 
> I think the level of detail in normal mode should be definable by each user.  
>Specifically, the options should be given to, say, not display images, not display 
>forms, not display summaries, and not display item text.  These settings would apply 
>to all portlets of a given type for the user.

There really isn't any way we can assure this as people can write
Portlets any way they feel.
 

> Should there be a different config for each type of portlet? Or should we come up 
>with a config screen that tries to have all possible defaults for all portlets in one?

XMLSchema based config.

<snip>

-- 
Kevin A Burton ([EMAIL PROTECTED])
http://relativity.yi.org
Message to SUN:  "Please Open Source Java!"
"For evil to win is for good men to do nothing."


--
--------------------------------------------------------------
Please read the FAQ! <http://java.apache.org/faq/>
To subscribe:        [EMAIL PROTECTED]
To unsubscribe:      [EMAIL PROTECTED]
Archives and Other:  <http://java.apache.org/main/mail.html>
Problems?:           [EMAIL PROTECTED]

Reply via email to