Orbeon Forms community mailing list

meta Orbeon version

Classic

List

Threaded

5 messages Options

Colin Seaman

meta Orbeon version

Hi Guys,

Is there any chance you could remove the

<meta name="generator" content="Orbeon Forms 3.5.rc1.200702141756">

tag outputted in the HTML from Orbeon. It seems to us that this is a minor security flaw
as people know which version of OPS you're using.

--

Colin Seaman
Senior Developer

Tradocs Ltd,
Tower Point,
44 North Road,
Brighton,
BN1 1YR

email: [hidden email]
skype: colin,seaman
telephone: 0870-1417031
website: http://www.tradocs.net

This email and any files transmitted with it are confidential
and intended solely for the use of the individual or entity to
whom they are addressed. If you have received this email in
error please contact Tradocs. Please note that any views or
opinions presented in this email are solely those of the author
and do not necessarily represent those of the company. Finally,
the recipient should check this email and any attachments for
the presence of viruses. The company accepts no liability for
any damage caused by any virus transmitted by this email.
This content of this email is without prejudice.

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Ryan Puddephatt

RE: meta Orbeon version

Colin,
It is generated in /config/theme-plain.xsl line 56 (in mine anyway)
just remove it, and to be tidy the variable on line 28 and its namespace on
25.

All secure :-)

Ryan

Ryan Puddephatt
Software Engineer

Teleflex Group - IT UK
1 Michaelson Square
Livingston
West Lothian
Scotland
EH54 7DP

e> [hidden email]
t> +44(0)1506 407 110
f> +44(0)1506 407 108

>-----Original Message-----
>From: Colin Seaman [mailto:[hidden email]]
>Sent: 16 February 2007 11:54
>To: [hidden email]
>Subject: [ops-users] meta Orbeon version
>
>Hi Guys,
>
>Is there any chance you could remove the
>
><meta name="generator" content="Orbeon Forms 3.5.rc1.200702141756">
>
>tag outputted in the HTML from Orbeon. It seems to us that
>this is a minor security flaw as people know which version of
>OPS you're using.
>
>--
>
>Colin Seaman
>Senior Developer
>
>Tradocs Ltd,
>Tower Point,
>44 North Road,
>Brighton,
>BN1 1YR
>
>email: [hidden email]
>skype: colin,seaman
>telephone: 0870-1417031
>website: http://www.tradocs.net
>
>This email and any files transmitted with it are confidential
>and intended solely for the use of the individual or entity to
>whom they are addressed. If you have received this email in
>error please contact Tradocs. Please note that any views or
>opinions presented in this email are solely those of the
>author and do not necessarily represent those of the company.
>Finally, the recipient should check this email and any
>attachments for the presence of viruses. The company accepts
>no liability for any damage caused by any virus transmitted by
>this email.
>This content of this email is without prejudice.
>
>
>

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Erik Bruchez

Re: meta Orbeon version

Administrator

In reply to this post by Colin Seaman

Colin,

We could certainly remove it. The hope was to make it easier for people
to know what version of Orbeon Forms they are using when they report issues.

But as Ryan pointed out, it is easy to remove.

-Erik

Colin Seaman wrote:

> Hi Guys,
>
> Is there any chance you could remove the
>
> <meta name="generator" content="Orbeon Forms 3.5.rc1.200702141756">
>
> tag outputted in the HTML from Orbeon. It seems to us that this is a
> minor security flaw
> as people know which version of OPS you're using.
>

--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws

Alexander Žaťko

Re: meta Orbeon version

my vote - keep the tag

On Feb 16, 2007, at 4:45 PM, Erik Bruchez wrote:

> Colin,
>
> We could certainly remove it. The hope was to make it easier for
> people to know what version of Orbeon Forms they are using when
> they report issues.
>
> But as Ryan pointed out, it is easy to remove.
>
> -Erik
>
> Colin Seaman wrote:
>> Hi Guys,
>> Is there any chance you could remove the
>> <meta name="generator" content="Orbeon Forms 3.5.rc1.200702141756">
>> tag outputted in the HTML from Orbeon. It seems to us that this
>> is a minor security flaw
>> as people know which version of OPS you're using.
>
>
> --
> Orbeon Forms - Web Forms for the Enterprise Done the Right Way
> http://www.orbeon.com/
>
>
> --
> You receive this message as a subscriber of the ops-
> [hidden email] mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> ObjectWeb mailing lists service home page: http://www.objectweb.org/
> wws

Colin Seaman

Re: meta Orbeon version

sure, by all means keep it. I can see why it's useful in a development environment, but perhaps not a live one.

Thanks for the tips for removing it!

Colin Seaman
Senior Developer
 
Tradocs Ltd,
Tower Point,
44 North Road,
Brighton,
BN1 1YR

email:     [hidden email]
skype:     colin,seaman
telephone: 0870-1417031
website:   http://www.tradocs.net

This email and any files transmitted with it are confidential 
and intended solely for the use of the individual or entity to 
whom they are addressed. If you have received this email in 
error please contact Tradocs. Please note that any views or 
opinions presented in this email are solely those of the author 
and do not necessarily represent those of the company. Finally, 
the recipient should check this email and any attachments for 
the presence of viruses. The company accepts no liability for 
any damage caused by any virus transmitted by this email.
This content of this email is without prejudice.

Alexander Zatko wrote:

my vote - keep the tag

On Feb 16, 2007, at 4:45 PM, Erik Bruchez wrote:

Colin,

We could certainly remove it. The hope was to make it easier for people to know what version of Orbeon Forms they are using when they report issues.

But as Ryan pointed out, it is easy to remove.

-Erik

Colin Seaman wrote:

Hi Guys,
Is there any chance you could remove the
<meta name="generator" content="Orbeon Forms 3.5.rc1.200702141756">
tag outputted in the HTML from Orbeon. It seems to us that this is a minor security flaw
as people know which version of OPS you're using.

--Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/

--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: [hidden email]
For general help: [hidden email]
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: [hidden email]
For general help: [hidden email]
ObjectWeb mailing lists service home page: http://www.objectweb.org/wws
  