[WAVE-135] Security: XSSI Protection

• Type: Bug
• Status: Open
• Priority: Minor
• Resolution: Unresolved
• Component/s: Server
• Labels: security
• Assignee: Unassigned
• Reporter: Anonymous
• Created: 28/Apr/11 18:24
• Updated: 20/Apr/15 22:45

Description

Currently we have a fetch servelet which allows the user to fetch a snapshot of the wavelet. We should either remove it or add XSSI protection, by purposely prefixing a few characters to the head of the produced json.

—
Issue imported from http://code.google.com/p/wave-protocol/issues/detail?id=134

Owner: [e-mail]
Label: Type-Defect
Label: Priority-Medium
Stars: 1
State: open
Status: Accepted