[Fusioninventory-devel] UserAgent patch for FusionInventory
Guillaume Rousse
guillomovitch at gmail.com
Fri Jan 7 11:34:08 UTC 2011
Le 07/01/2011 11:23, Guillaume PROTET a écrit :
> Hi,
>
> Your patch won't be integrated as is because, for security reasons, it is inconceivable for us to integrate by default an agent not supported by OCS.
I fail to see how decing to examine or reject a message, just because of
client-managed user-agent string, would provide any kind of security
benefit. You'd better validate the content of the message against a
grammar, to check what is said, rather than blindy believe the client
claiming who he is.
Or find another excuse than 'security'.
--
BOFH excuse #259:
Someone's tie is caught in the printer, and if anything else gets
printed, he'll be in it too.
More information about the Fusioninventory-devel
mailing list