[Fusioninventory-devel] UserAgent patch for FusionInventory

Guillaume Rousse guillomovitch at gmail.com
Fri Jan 7 11:34:08 UTC 2011


Le 07/01/2011 11:23, Guillaume PROTET a écrit :
> Hi,
> 
> Your patch won't be integrated as is because, for security reasons, it is inconceivable for us to integrate by default an agent not supported by OCS.
I fail to see how decing to examine or reject a message, just because of
client-managed user-agent string, would provide any kind of security
benefit. You'd better validate the content of the message against a
grammar, to check what is said, rather than blindy believe the client
claiming who he is.

Or find another excuse than 'security'.
-- 
BOFH excuse #259:

Someone's tie is caught in the printer, and if anything else gets
printed, he'll be in it too.



More information about the Fusioninventory-devel mailing list