From: <Joh...@ga...> - 2008-12-14 23:01:31
|
HI Jeroen, Thanks for the reply. It looks like this sort of security is ideal for me (and probably others around the world). I look forward to its implementation in the branch. Thanks. John > -----Original Message----- > From: Jeroen Ticheler [mailto:Jer...@ge...] > Sent: Friday, 12 December 2008 11:46 PM > To: Hockaday John > Cc: geo...@li... > Subject: Re: [GeoNetwork-devel] Does GeoNetwork do any > checking of the resutls from OGC requests? [SEC=UNCLASSIFIED] > > > Hi John, > For the Dutch government we are implementing a small service > monitoring tool that will do those kind of checks. It is part of the > GeoNetwork application and will for instance show the status and > availability of a particular service. Once it is matured a bit more we > can also make that part of the GeoNetwork opensource trunk. > Ciao, > Jeroen > > On Dec 12, 2008, at 3:24 AM, <Joh...@ga...> > <Joh...@ga... > > wrote: > > > Hi All, > > > > We haven't been able to do any OGC requests to external WMS, WFS and > > WCS because the "GET" and "POST" HTTP commands are blocked through > > our firewall. The requests are blocked for security reasons. This > > prompts me to ask, does GN do some checking to see if the stated WMS > > URL is actually a WMS? For example, does it try a 'GetCapabilities' > > request and then validate the returned XML to see if it is valid > > capabilities version X.X.X XML file? > > > > Similarly does GN then check the returned content from 'GetMap' and > > 'GetFeatureInfo' check to see if the returned content is valid XML > > file according to the OGC specifications? > > > > If not, don't you think that this would be a good idea to show that > > GN has considered some security issues? > > > > Thanks. > > > > > > John Hockaday > > Geoscience Australia > > GPO Box 378 > > Canberra ACT 2601 > > (02) 6249 9735 > > http://www.ga.gov.au/ > > john.hockaday\@ga.gov.au > > > > > -------------------------------------------------------------- > ---------------- > > SF.Net email is Sponsored by MIX09, March 18-20, 2009 in Las Vegas, > > Nevada. > > The future of the web can't happen without you. Join us at MIX09 to > > help > > pave the way to the Next Web now. Learn more and register at > > > http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009 .visitmix.com/ > _______________________________________________ > GeoNetwork-devel mailing list > Geo...@li... > https://lists.sourceforge.net/lists/listinfo/geonetwork-devel > GeoNetwork OpenSource is maintained at http://sourceforge.net/projects/geonetwork > |