Hello, Koen

This case of documentation lack is not the first one concerning security.
Could you send Wt's set of security rules, please?

С уважением,
Нагаев Борис


On Mon, Jul 22, 2013 at 4:21 PM, Koen Deforche <k...@emweb.be> wrote:
> Hey,
>
> Wt's security rule related to this is: widgets (and signals connected to
> these widgets) are not 'exposed' to the user only if the widget isn't
> inserted in the widget hierarchy.
>
> Hiding a widget thus does not have any meaning w.r.t. security. You should
> create it only when the user has successfully authentiated (and delete it
> when the user logs out).
>
> Regards,
> koen
>
>
> 2013/7/22 Burak Kulakli <kula...@yahoo.co.uk>
>>
>> Hello,
>>
>> In my Wt app, the start page only has auth widget and when
>> authentication is complete my container widget is shown.
>>
>> However, I've installed Web Developer extension in Chromium and if I
>> disable inline styles with it, my hidden container widget is shown
>> just below the authentication widget.
>>
>> There is nothing wrong in normal operation. I'm asking this for
>> security reasons. Those widgets must be hidden until a user logged in.
>>
>> What might be wrong here. Am I missing something?
>>
>> Regards,
>> Burak
>>
>>
>> ------------------------------------------------------------------------------
>> See everything from the browser to the database with AppDynamics
>> Get end-to-end visibility with application monitoring from AppDynamics
>> Isolate bottlenecks and diagnose root cause in seconds.
>> Start your free trial of AppDynamics Pro today!
>>
>> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
>> _______________________________________________
>> witty-interest mailing list
>> witty-interest@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/witty-interest
>
>
>
> ------------------------------------------------------------------------------
> See everything from the browser to the database with AppDynamics
> Get end-to-end visibility with application monitoring from AppDynamics
> Isolate bottlenecks and diagnose root cause in seconds.
> Start your free trial of AppDynamics Pro today!
> http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
> _______________________________________________
> witty-interest mailing list
> witty-interest@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/witty-interest
>

------------------------------------------------------------------------------
See everything from the browser to the database with AppDynamics
Get end-to-end visibility with application monitoring from AppDynamics
Isolate bottlenecks and diagnose root cause in seconds.
Start your free trial of AppDynamics Pro today!
http://pubads.g.doubleclick.net/gampad/clk?id=48808831&iu=/4140/ostg.clktrk
_______________________________________________
witty-interest mailing list
witty-interest@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/witty-interest

Reply via email to