[Chameleon] Security Question

Eric Bridger eric at gomoos.org
Sat Feb 19 07:57:45 EST 2005


Corey,

We have depolyed a number of Chameleon applications and I cannot find any display of the connection string in the html source in them.
Do you have any idea which widget is doing this?

Eric

At 11:05 AM 02/19/2005 +0100, Bart van den Eijnden wrote:
>Hi,
>
>one way of working around this would be setting up a Mapserver WMS around  
>your PostGIS data source, and using a WMS client layer in your Chameleon  
>MAP file.
>
>But I am sure there will be easier ways/fixes .....
>
>Best regards,
>Bart
>
>On Fri, 18 Feb 2005 14:26:02 -0700, c p <cplists at gmail.com> wrote:
>
>>Hi again...
>>
>>I noticed if I view the source of the generated html & javascript in
>>my web browser that the layer definitions from my mapfile are embedded
>>in the javascript including the connection string (including username
>>and password(!!)) for postgis data sources.
>>
>>Is this a known issue?  How does one work around this?
>>
>>Thanks,
>>Corey
 



More information about the Chameleon mailing list