|
From: Dmitriy S. <sha...@gm...> - 2010-03-24 18:25:44
|
On Wed, 2010-03-24 at 19:00 +0100, Wolfgang Meier wrote: > shouldn't those functions be limited to a dba user? Allowing guest to > download any jar file from certain eXist directories seems to be a > security issue. Do we speak about LibFunction? I don't see any security issue there, or I'm missing something? Any scenario? It quite hard-coded staff at the end. -- Cheers, Dmitriy Shabanov |