Hi All,
I was wondering if it was possible to disable the special http response headers that are sent back from GWC. In particular I don’t really want GWC to send back the tile bounds header (potential security issue).
Any help would be very much appreciated.
Regards,
Toby
On Thu, Mar 26, 2015 at 11:25 AM, Tobias Reinicke <ramotswa@anonymised.com>
wrote:
Hi All,
I was wondering if it was possible to disable the special http response
headers that are sent back from GWC. In particular I don't really want GWC
to send back the tile bounds header (potential security issue).
Could you explain how the tile bounds can be seen as a security issue? It's
mere georeferencing... you're afraid that someone would intercept the
requests (e.g., man in the middle) and rebuild your original data?
geowebcache-tile-index: [64, 34, 6]
Content-Type: image/png
Content-Length: 2204
geowebcache-cache-result: HIT
geowebcache-tile-index: [64, 34, 6]
geowebcache-tile-bounds: 0.0,5.625,2.8125,8.4375
geowebcache-gridset: EPSG:4326
geowebcache-crs: EPSG:4326
Last-Modified: Thu, 26 Mar 2015 10:37:31 GMT
Content-Disposition: inline; filename=geoserver-dispatch.image
That said, I don't know of a way to disable those headers, save changing
the code or setting up a proxy in the middle that removes the headers.
Cheers
Andrea
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.
-------------------------------------------------------
Hi Andrea,
Yup - exactly that. I was excited that Wmts sends just tilerow/col rather than bbox, but then I saw the responses…
Ok, good to know, I had thought of the proxy as an option so will have a look. I wonder if tms responds with the same headers?
Toby
On Thu, Mar 26, 2015 at 11:25 AM, Tobias Reinicke <ramotswa@anonymised.com…> wrote:
Hi All,
I was wondering if it was possible to disable the special http response headers that are sent back from GWC. In particular I don’t really want GWC to send back the tile bounds header (potential security issue).
Could you explain how the tile bounds can be seen as a security issue? It’s mere georeferencing… you’re afraid that someone would intercept the
requests (e.g., man in the middle) and rebuild your original data?
geowebcache-tile-index: [64, 34, 6]
Content-Type: image/png
Content-Length: 2204
geowebcache-cache-result: HIT
geowebcache-tile-index: [64, 34, 6]
geowebcache-tile-bounds: 0.0,5.625,2.8125,8.4375
geowebcache-gridset: EPSG:4326
geowebcache-crs: EPSG:4326
Last-Modified: Thu, 26 Mar 2015 10:37:31 GMT
Content-Disposition: inline; filename=geoserver-dispatch.image
That said, I don’t know of a way to disable those headers, save changing the code or setting up a proxy in the middle that removes the headers.
Cheers
Andrea
–
==
GeoServer Professional Services from the experts! Visit
http://goo.gl/NWWaa2 for more information.
==
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.
On Thu, Mar 26, 2015 at 1:45 PM, Toby R <ramotswa@anonymised.com> wrote:
Hi Andrea,
Yup - exactly that. I was excited that Wmts sends just tilerow/col rather
than bbox, but then I saw the responses..Ok, good to know, I had thought of the proxy as an option so will have a
look. I wonder if tms responds with the same headers?
I believe all supported tile protocols do
Cheers
Andrea
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.
-------------------------------------------------------
I have created a postgresql database from an oracle database and transferred across some date fields
The date created in postgresql looks like this in sheet view using the date field type :-
2006-08-18
The date returned from GetFeatureInfo is :-
2006-08-17Z
The date returned from an info click in layer preview is :-
18/08/06 00:00
Is there a setting or variable I need to change to make the data appear correctly in a GetFeatureInfo request ?
Mark Ismail
On Thu, Mar 26, 2015 at 2:25 PM, Ismail, Mark <mark.ismail@anonymised.com>
wrote:
I have created a postgresql database from an oracle database and
transferred across some date fieldsThe date created in postgresql looks like this in sheet view using the
date field type :-2006-08-18
The date returned from GetFeatureInfo is :-
2006-08-17Z
The date returned from an info click in layer preview is :-
18/08/06 00:00
The info click in layer preview is a GetFeatureInfo... in HTML format.
What format are you asking the GetFeatureInfo into to get the other
version? I guess GML?
Cheers
Andrea
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
*AVVERTENZE AI SENSI DEL D.Lgs. 196/2003*
Le informazioni contenute in questo messaggio di posta elettronica e/o
nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il
loro utilizzo è consentito esclusivamente al destinatario del messaggio,
per le finalità indicate nel messaggio stesso. Qualora riceviate questo
messaggio senza esserne il destinatario, Vi preghiamo cortesemente di
darcene notizia via e-mail e di procedere alla distruzione del messaggio
stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso,
divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od
utilizzarlo per finalità diverse, costituisce comportamento contrario ai
principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for
the attention and use of the named addressee(s) and may be confidential or
proprietary in nature or covered by the provisions of privacy act
(Legislative Decree June, 30 2003, no.196 - Italy's New Data Protection
Code).Any use not in accord with its purpose, any disclosure, reproduction,
copying, distribution, or either dissemination, either whole or partial, is
strictly forbidden except previous formal approval of the named
addressee(s). If you are not the intended recipient, please contact
immediately the sender by telephone, fax or e-mail and delete the
information in this message that has been received in error. The sender
does not give any warranty or accept liability as the content, accuracy or
completeness of sent messages and accepts no responsibility for changes
made after they were sent or for other risks which arise as a result of
e-mail transmission, viruses, etc.
-------------------------------------------------------
What format are you asking the GetFeatureInfo into to get the other version? I guess GML?
application/json
Mark Ismail
From: andrea.aime@…84… [mailto:andrea.aime@…84…] On Behalf Of Andrea Aime
Sent: 26 March 2015 13:34
To: Ismail, Mark
Cc: geoserver-users@lists.sourceforge.net
Subject: Re: [Geoserver-users] Date field in geoserver GetFeatureInfo seems to be incorrect
On Thu, Mar 26, 2015 at 2:25 PM, Ismail, Mark <mark.ismail@…6440…> wrote:
I have created a postgresql database from an oracle database and transferred across some date fields
The date created in postgresql looks like this in sheet view using the date field type :-
2006-08-18
The date returned from GetFeatureInfo is :-
2006-08-17Z
The date returned from an info click in layer preview is :-
18/08/06 00:00
The info click in layer preview is a GetFeatureInfo… in HTML format.
What format are you asking the GetFeatureInfo into to get the other version? I guess GML?
Cheers
Andrea
–
==
GeoServer Professional Services from the experts! Visit
http://goo.gl/NWWaa2 for more information.
==
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://twitter.com/geosolutions_it
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.
I’ve added a feature request to the GWC issue tracker. https://github.com/GeoWebCache/geowebcache/issues/323
On 26 March 2015 at 06:09, Andrea Aime <andrea.aime@anonymised.com> wrote:
Dive into the World of Parallel Programming The Go Parallel Website, sponsored
by Intel and developed in partnership with Slashdot Media, is your hub for all
things parallel software development, from weekly thought leadership blogs to
news, videos, case studies, tutorials and more. Take a look and join the
conversation now. http://goparallel.sourceforge.net/
Geoserver-users mailing list
Geoserver-users@anonymised.comsts.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users
–
On Thu, Mar 26, 2015 at 1:45 PM, Toby R <ramotswa@anonymised.com> wrote:
Hi Andrea,
Yup - exactly that. I was excited that Wmts sends just tilerow/col rather than bbox, but then I saw the responses…Ok, good to know, I had thought of the proxy as an option so will have a look. I wonder if tms responds with the same headers?
I believe all supported tile protocols do
Cheers
Andrea
–
==
GeoServer Professional Services from the experts! Visit
http://goo.gl/NWWaa2 for more information.
==
Ing. Andrea Aime
@geowolf
Technical Lead
GeoSolutions S.A.S.
Via Poggio alle Viti 1187
55054 Massarosa (LU)
Italy
phone: +39 0584 962313
fax: +39 0584 1660272
mob: +39 339 8844549
http://www.geo-solutions.it
http://twitter.com/geosolutions_it
AVVERTENZE AI SENSI DEL D.Lgs. 196/2003
Le informazioni contenute in questo messaggio di posta elettronica e/o nel/i file/s allegato/i sono da considerarsi strettamente riservate. Il loro utilizzo è consentito esclusivamente al destinatario del messaggio, per le finalità indicate nel messaggio stesso. Qualora riceviate questo messaggio senza esserne il destinatario, Vi preghiamo cortesemente di darcene notizia via e-mail e di procedere alla distruzione del messaggio stesso, cancellandolo dal Vostro sistema. Conservare il messaggio stesso, divulgarlo anche in parte, distribuirlo ad altri soggetti, copiarlo, od utilizzarlo per finalità diverse, costituisce comportamento contrario ai principi dettati dal D.Lgs. 196/2003.
The information in this message and/or attachments, is intended solely for the attention and use of the named addressee(s) and may be confidential or proprietary in nature or covered by the provisions of privacy act (Legislative Decree June, 30 2003, no.196 - Italy’s New Data Protection Code).Any use not in accord with its purpose, any disclosure, reproduction, copying, distribution, or either dissemination, either whole or partial, is strictly forbidden except previous formal approval of the named addressee(s). If you are not the intended recipient, please contact immediately the sender by telephone, fax or e-mail and delete the information in this message that has been received in error. The sender does not give any warranty or accept liability as the content, accuracy or completeness of sent messages and accepts no responsibility for changes made after they were sent or for other risks which arise as a result of e-mail transmission, viruses, etc.
Kevin Smith
Software Engineer | Boundless
+1-778-785-7459
