Re: [GeoNetwork-devel] Does GeoNetwork do any checking of the resutls from OGC requests? [SEC=UNCLASSIFIED]

[<Joh...@ga...>]

Hi Jeroen,

I was wondering if this code (that validates the XML from a WMS) has gone into the trunk?  If not, can you indicate where it is and if we can get it into our version of GN which is 2.2.0?

Thanks.


John

> -----Original Message-----
> From: Hockaday John
> Sent: Monday, 15 December 2008 10:01 AM
> To: 'Jeroen Ticheler'
> Cc: geo...@li...
> Subject: RE: [GeoNetwork-devel] Does GeoNetwork do any
> checking of the resutls from OGC requests? [SEC=UNCLASSIFIED]
>
>
> HI Jeroen,
>
> Thanks for the reply.  It looks like this sort of security is
> ideal for me (and probably others around the world).  I look
> forward to its implementation in the branch.
>
> Thanks.
>
>
> John
>
> > -----Original Message-----
> > From: Jeroen Ticheler [mailto:Jer...@ge...]
> > Sent: Friday, 12 December 2008 11:46 PM
> > To: Hockaday John
> > Cc: geo...@li...
> > Subject: Re: [GeoNetwork-devel] Does GeoNetwork do any
> > checking of the resutls from OGC requests? [SEC=UNCLASSIFIED]
> >
> >
> > Hi John,
> > For the Dutch government we are implementing a small service
> > monitoring tool that will do those kind of checks. It is part of the
> > GeoNetwork application and will for instance show the status and
> > availability of a particular service. Once it is matured a
> bit more we
> > can also make that part of the GeoNetwork opensource trunk.
> > Ciao,
> > Jeroen
> >
> > On Dec 12, 2008, at 3:24 AM, <Joh...@ga...>
> > <Joh...@ga...
> >  > wrote:
> >
> > > Hi All,
> > >
> > > We haven't been able to do any OGC requests to external
> WMS, WFS and
> > > WCS because the "GET" and "POST" HTTP commands are blocked through
> > > our firewall.  The requests are blocked for security
> reasons.  This
> > > prompts me to ask, does GN do some checking to see if the
> stated WMS
> > > URL is actually a WMS?  For example, does it try a
> 'GetCapabilities'
> > > request and then validate the returned XML to see if it is valid
> > > capabilities version X.X.X XML file?
> > >
> > > Similarly does GN then check the returned content from
> 'GetMap' and
> > > 'GetFeatureInfo' check to see if the returned content is valid XML
> > > file according to the OGC specifications?
> > >
> > > If not, don't you think that this would be a good idea to
> show that
> > > GN has considered some security issues?
> > >
> > > Thanks.
> > >
> > >
> > > John Hockaday
> > > Geoscience Australia
> > > GPO Box 378
> > > Canberra ACT 2601
> > > (02) 6249 9735
> > > http://www.ga.gov.au/
> > > john.hockaday\@ga.gov.au
> > >
> > >
> > --------------------------------------------------------------
> > ----------------
> > > SF.Net email is Sponsored by MIX09, March 18-20, 2009 in
> Las Vegas,
> > > Nevada.
> > > The future of the web can't happen without you.  Join us
> at MIX09 to
> > > help
> > > pave the way to the Next Web now. Learn more and register at
> > >
> > http://ad.doubleclick.net/clk;208669438;13503038;i?http://2009
> .visitmix.com/
> > _______________________________________________
> > GeoNetwork-devel mailing list
> > Geo...@li...
> > https://lists.sourceforge.net/lists/listinfo/geonetwork-devel
> > GeoNetwork OpenSource is maintained at
> http://sourceforge.net/projects/geonetwork
> >
>
>