Uploaded image for project: 'Red Hat Process Automation Manager'
  1. Red Hat Process Automation Manager
  2. RHPAM-1622

Business-central should work without resources fetched from external servers

    XMLWordPrintable

Details

    • 0
    • 0% 0%
    • 2019 Week 05-07

    Description

      When navigating to the 'Projects' view in RHPAM 7.0.x, the following files are fetched:

      http://www.google.com/uds/api/visualization/1.0/40ff64b1d9d6b3213524485974f36cc0/format+en,default+en,ui+en,corechart+en.I.js
      http://www.google.com/uds/api/visualization/1.0/40ff64b1d9d6b3213524485974f36cc0/ui+en.css
      http://www.google.com/uds/?file=visualization&v=1.0&hl=default&packages=corechart&async=2
      http://www.google.com/jsapi?key=ABQIAAAAG8LzhtshQCjpSshU_uJjmxTwM0brOpm-All5BF6PoaKBxRWWERTZER2lJ4GnsG8nvhKLOQ20degaEQ&callback=__gwt_AjaxLoader_onLoad

      And in the process instance view:
      http://ajax.googleapis.com/ajax/static/modules/gviz/1.0/core/tooltip.css

      For security sensitive clients it is a huge risk that their components interact with external services like google. If these resources are required to provide the full functionality of the UI, we should consider adding a system property to give the choice between
      a) full functionality with resources being fetched from the internet and
      b) limited functionality, but no external resources required.

      Attachments

        Issue Links

          Activity

            People

              rhn-support-wsiqueir William Siqueira
              rhn-support-mputz Martin Weiler (Inactive)
              Jan Hrcek Jan Hrcek (Inactive)
              Jan Hrcek Jan Hrcek (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: