including a file on on-rev

Andre Garzia andre at andregarzia.com
Fri Nov 6 08:15:26 EST 2009


Hi Claudi,

The piece below will not work. RevServer include command works with the file
system and has no knowledge of HTTP. Having a include command that worked
over a network, could pose a security issue since it would open a bad
secured server to cross site scripting. Yes in the desktop we can do go
stack url and start using it which is basically the same thing but a
standalone is in compiled form so it is harder to change the source in it.
RevServer is scripting, text files, if someone manage to change a line there
to include a remote file, all hell breaks loose...


> include "http://claudi.on-rev.com/lib/cc_PageStats.irev"          -
> fails
>

Cheers
andre

-- 
http://www.andregarzia.com All We Do Is Code.



More information about the use-livecode mailing list