[Chameleon] Security Question

[c p]

Paul,

Thanks for that information.  Should I file a bug on this issue?  

BTW, which components are being actively developed...or maybe I should
say which ones are being used most widely and thus are more actively
supported?

Regards,
Corey


On Tue, 22 Feb 2005 12:00:45 -0500, Paul Spencer
<pspencer at dmsolutions.ca> wrote:
> um.  We haven't done a lot with the JSAPI widget lately, but I can
> certainly believe that it might do this.
> 
> The JSAPI mode was added when Chameleon was an OGC-only environment,
> i.e. all the layers were WMS layers.  Since we now allow any MapServer
> layer, it is probably doing some inappropriate things.
> 
> I suspect that you can fix this temporarily by editing:
> 
> chameleon/htdocs/widgets/cwcjsapi/cwcjsapi.widget.php
> 
> and removing line 208 which reads:
> 
> $szLayerInfo .="aLayerconnection[".$i."] = '" .  $poLayer->connection .
> "';\n";
> 
> Cheers
> 
> Paul