Thanks Paul,
_______________
From: users-boun...@xwiki.org [users-boun...@xwiki.org] On Behalf Of Paul 
Libbrecht [p...@hoplahup.net]
Sent: 14 February 2012 09:32
To: XWiki Users
Subject: Re: [xwiki-users] security breach?

Le 14 févr. 2012 à 00:09, ricardo.julio.rodriguez.fernan...@sergas.es a écrit :
> http://atrium_km.idisantiago.es/bin/download/Project/Transcan2012/S28BW.numbers.png
>  - at least from my browsers here, this image is freely accessible...

>

>> Is there a specific proxy, cache, reverse-proxy, load-balancer or SSL
>> accelerator between you and the website ?
>
> Nope, to the best of my knowledge. It seems to me that only a misfunctioning 
> of my local browsers/cache can explain this behavior.

>>> Ricardo,
>>>
>>> not having a proxy would mean that you'd run the servlet container (tomcat, 
>>> jetty, ...) as root or at least start it as such. This is rarely done.
>>>
>>> paul

You are right: this way of doing things is not included in any best practices 
guide. It has been a heritage of old times I've been not able to change yet. I 
do hope I'll be able to get a better environment to run XWiki in the near 
future. And apologize for any noise I can introduce in the list by doing things 
this way.

Thank you so much for your comments,

Ricardo

--
Ricardo Rodríguez
Research Management and Promotion Technician
Health Research Institute of Santiago de Compostela (IDIS)
http://www.idisantiago.es

_______________________________________________
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Nota: A información contida nesta mensaxe e os seus posibles documentos 
adxuntos é privada e confidencial e está dirixida únicamente ó seu 
destinatario/a. Se vostede non é o/a destinatario/a orixinal desta mensaxe, por 
favor elimínea. A distribución ou copia desta mensaxe non está autorizada.

Nota: La información contenida en este mensaje y sus posibles documentos 
adjuntos es privada y confidencial y está dirigida únicamente a su 
destinatario/a. Si usted no es el/la destinatario/a original de este mensaje, 
por favor elimínelo. La distribución o copia de este mensaje no está autorizada.

See more languages: http://www.sergas.es/aviso_confidencialidad.htm
_______________________________________________
users mailing list
users@xwiki.org
http://lists.xwiki.org/mailman/listinfo/users

Reply via email to