On Feb 7, 2008 8:36 AM, artemy tregoubenko <[EMAIL PROTECTED]> wrote:

> Hi,
>
> In file in /features/core/feature.xml there're lines:
>    <script><![CDATA[
>      gadgets.io.init({
>        proxyUrl: "http://www.gmodules.com/ig/proxy?url=%url%";,
>        jsonProxyUrl: "proxy?url=%url%&output=js"
>      });
>    ]]></script>
>
> There's no comment about why gmodules.com proxy is used here. Should
> proxyUrl be "proxy?url=%url%"? If no, could someone please explain
> reason for this here and/or in comments?


This is because /proxy (without the js) would be an open proxy -- possibly
something that you'd want to avoid until we have a better security mechanism
in place to govern the open proxy. We can certainly change the default,
though we should include a comment about how this could be potentially
dangerous.

Reply via email to