Ives Steglich wrote:
> Dr. Rodney G. McDuff wrote:
>
>>Hi
>> Some of the security dudes here are giving me grief because OpenCA
>>exposure configuration data when garbage is injected into the web page
>>arguments. Ie.
>>
>>How can I stop this.
>>
>
> You may change the error message functions found in:
>
> modules/perl5/OpenCA/UI/HTML.pm
>
forgot one thing after this code-changes you have to call:
openca_rc restart
otherwise the changes will have no effects ;)
do you think it would be a good idea to have this configurable?
like in config.xml: SHOW_ERROR_MSGS = [YES|NO]
the saver (in case one doesn't like this) default config would then be
[NO] - so a user or tester would just see: "General Error" or
"Configuraton Error" without any further details, which can be found in
the local logfiles
greetings
dalini
-------------------------------------------------------
This SF.Net email is sponsored by:
Power Architecture Resource Center: Free content, downloads, discussions,
and more. http://solutions.newsforge.com/ibmarch.tmpl
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users
