Weblingo from a Customview.html...

Message from Sean M Alderman via eLinkI'm looking for a way to build a customview.html file for a folderthat's got some weblingo in it. I want to use the oldcom.opentext.scroller.Scroller.scroller.jar from inside a customviewfile. Please don't ask why I want to use that scroller, it's a longstory.I imagine that the customview is not actually processed, instead justsent to the browser, although I have not looked into this. Might anyonehave any ideas?P.S. Would it be possible to see the customview.html from the KnowledgeCenter's Enterprise workspace as well? I really think that presentationis cool, and I'd like to see how it's done.-- Sean M Alderman

Find more posts tagged with

Comments

John_Shoun

We have been interested in being able to embed oscript behavior in a customview.html page as well. It would be interesting to see this included in a future release.I think that a related feature that would provide equivalent functionality would be to have a "customview.xsl" page. If this is detected the current node (folder) would be exported as XML and transformed with the referenced customview.xsl. This would allow us to get a common header, search, navigation, function, and footer on the page while allowing dynamic content elsewhere.The view on the Knowledge Center enterprise looks nice, but it is very low-tech. You can look at the customview.html and it is only static html and stylsheets (css). It is all hard coded and if the sub-items change, then the customview has to be revised. [Check the revision history -- there are 58.] This approach works (and we have used it on some sites), but it is high maintenance.

eLink User

Message from Hans Stoop <<A HREF="mailto:hstoop@opentext.com">hstoop@opentext.com> via eLink

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">eLink

Hi John,

About the customview.xsl request:

This is currently supported by the Livelink Appearance module. Although not exactly in the way as you describe it. The Appearance module also supports a customview.xml file. If you put XHTML in that file you can use it to display it in your skin.

About OScript in customview.html:

Everybody is allowed to add a customview.html file. If you allow OScript in there, you allow everybody to run his own OScript functions. And for me it wouldn't be that difficult to get myself admin rights on your system in that situation.

Hans

--------
Livelink Appearance: the easiest way to skin Livelink.
Contact hstoop@opentext.com for more information.

-----Original Message-----
From: eLink Discussion: Development Discussion [mailto:development@elinkkc.opentext.com]
Sent: maandag 9 december 2002 21:27
To: eLink Recipient
Subject: we second this request ...

we second this request ... Posted by NortelNC Admin (Shoun, John) on 12/09/2002 03:24 PM
In reply to: Weblingo from a Customview.html... Posted by eLink on 12/09/2002 11:44 AM

We have been interested in being able to embed oscript behavior in a customview.html page as well. It would be interesting to see this included in a future release.

I think that a related feature that would provide equivalent functionality would be to have a "customview.xsl" page. If this is detected the current node (folder) would be exported as XML and transformed with the referenced customview.xsl. This would allow us to get a common header, search, navigation, function, and footer on the page while allowing dynamic content elsewhere.

The view on the Knowledge Center enterprise looks nice, but it is very low-tech. You can look at the customview.html and it is only static html and stylsheets (css). It is all hard coded and if the sub-items change, then the customview has to be revised. [Check the revision history -- there are 58.] This approach works (and we have used it on some sites), but it is high maintenance.

eLink User

Message from Sean M Alderman via eLinkTrue, I can see how that would become a problem. I suppose one way todo it would be to in effect create a module out of the code thatprocesses the customview.html which could process a new document nodecalled customview.oml (or something oml standing for oscript markuplanguage). Then you could allow only administrators to add such a file.-- Sean M Alderman

Jeff_Lang_(lang_(Delete)_2245920)

If you start to allow end users to add html files that contain weblingo then you are essentially removing all permissions for users. I know that if I was allowed to add an html file with weblingo to a system, the first thing I would do is add a file with weblingo that changed my user permissions to the same as Admin. I could then control the world. All users would kneel before the power of my magnificent capabilities. I would revel in their subjugation.And so forth.

eLink User

Message from Sean M Alderman via eLinkWhich is why you would restrict the addition of such a file, as well asthe editing of it. For example, not every all users can create livereports. If one uses the application to secure an insecure piece, suchas the way Livereports are handled, then it should be maintainable.Live reports allow for direct modification of the database. Someonecould easily use the builder to create an encrypted password of theirchoice, then use a live report to update the password field in the KUAFtable for Admin. Risks exist everywhere on every system, awareness and properconfiguration are the keys to keeping the cap on them. It's usually notthe risks you know about that burn you.On Tue, 2002-12-10 at 14:32, eLink Discussion: Development Discussionwrote:> weblingo in files that can be added by an end user is a security risk> Posted by lang on 12/10/2002 02:28 PM> > If you start to allow end users to add html files that contain weblingo then you are essentially removing all permissions for users. I know that if I was allowed to add an html file with weblingo to a system, the first thing I would do is add a file with weblingo that changed my user permissions to the same as Admin. I could then control the world. All users would kneel before the power of my magnificent capabilities. I would revel in their subjugation.> > And so forth.> > [To reply to this thread, use your normal e-mail reply function.]> > ============================================================> > Topic: Weblingo from a Customview.html...> https://knowledge.opentext.com/knowledge/livelink.exe?func=ll&objId=2928295&objAction=view> > Discussion: Development Discussion> https://knowledge.opentext.com/knowledge/livelink.exe?func=ll&objId=786303&objAction=view> > Livelink Server:> https://knowledge.opentext.com/knowledge/livelink.exe-- Sean M Alderman