[Zope] Re: Re: [Security] How to encrypt a Zope oid ?

Edward Muller edwardam at interlix.com
Mon Sep 15 12:56:36 EDT 2003


On Mon, 2003-09-15 at 11:48, Passin, Tom wrote:
[snip]

>  If you
> want the pages to appear only within their intended frame, a user with
> the right browser can easily defeat that intention unless you enforce it
> using javascript in the page.

Which isn't secure at all, since someone who is really dedicated would
just fire up curl, wget, lynx, etc (insert tool of choice here) to
attempt to grab whatever they want anyway, bypassing any javascript on
the page.

-- 
Edward Muller - http://www.interlix.com - "Open Source Specialists"
Dedicated Zope Hosting - Web Hosting - Open Source Consulting
Network & PC Service & Support - Custom Programming
Phone: 417-862-0573 - Cell: 417-844-2435 - Fax: 417-862-0572
Jabber: edwardam at jabber.interlix.com - AIM: edwardam453 - ICQ: 287033
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.zope.org/pipermail/zope/attachments/20030915/6a9b7352/attachment.bin


More information about the Zope mailing list