[ANNOUNCE] Jarek Gawor has been appointed as the the PMC Chair of the Geronimo Project
All, Due to recent changes in my life, I've had less and less time to devote to the Geronimo project. Last month, I told the PMC that I wished to step down from my PMC Chair duties. The Geronimo PMC unanimously nominated Jarek Gawor to become the PMC Chair. I'm happy to announce that at this month's board meeting, the ASF Board appointed Jarek the new PMC Chair of the Geronimo project. As anyone following the Geronimo project should know, Jarek has been bringing a tremendous amount to the project in multiple ways. Please take a moment to thank Jarek for taking on this new role. Finally, to all the PMC members, committers, contributors, and users -- thanks for making my job as PMC chair so easy and enjoyable. It's been a pleasure working with you. --kevan
Re: xss protection in apache geronimo 3.x
Geronimo does not proivde the XSS protection facilities to the users' applicatoins, while it does consider that for the admin console, you may refer the filter codes in below : [1] https://svn.apache.org/repos/asf/geronimo/server/branches/3.0/plugins/console/console-filter/src/main/java/org/apache/geronimo/console/filter 2013/7/25 Si Chen sic...@opensourcestrategies.com Does Apache Geronimo 3.x provide protection against XSS attacks? -- Si Chen Open Source Strategies, Inc. sic...@opensourcestrategies.com http://www.OpenSourceStrategies.com LinkedIn: http://www.linkedin.com/in/opentaps Twitter: http://twitter.com/opentaps -- Ivan
Re: Access-Control-Allow-Origin
Hi, Not sure what web services programming model you are using in Geronimo 2.2.1, guess JAX-WS ? If does, you may inject a WebServiceContext in your endpoint and read/write the headers with WebServiceContext.getMessageContext. Hope it helps. Thanks. 2013/7/24 Florian Schaetz florian.scha...@optitool.de Hello, ** ** I’m trying to get some ajax request to work on a Geronimo 2.2.1 Webservice, but it seems like I have to somehow get the Access-Control-Allow-Origin header set to * on the server. Could anyone help me out here? Otherwise it seems, that Ajax2 does not recognize the Request-Type… ** ** Regards, ** ** Flo ** ** -- Ivan
