aboutsummaryrefslogtreecommitdiffstatshomepage
path: root/bin/Robust.HG.ini.example
diff options
context:
space:
mode:
authorJustin Clark-Casey (justincc)2015-03-04 17:51:11 +0000
committerJustin Clark-Casey (justincc)2015-03-04 18:27:51 +0000
commit3255335c42ff348465d235a3ccf9558d0d6d414b (patch)
tree5537a8bb51ef79f1b42a0a29e167da939630f434 /bin/Robust.HG.ini.example
parentAdd outbound URL filter to llHttpRequest() and osSetDynamicTextureURL*() scri... (diff)
downloadopensim-SC_OLD-3255335c42ff348465d235a3ccf9558d0d6d414b.zip
opensim-SC_OLD-3255335c42ff348465d235a3ccf9558d0d6d414b.tar.gz
opensim-SC_OLD-3255335c42ff348465d235a3ccf9558d0d6d414b.tar.bz2
opensim-SC_OLD-3255335c42ff348465d235a3ccf9558d0d6d414b.tar.xz
Make private services forbid llHTTPRequest() calls by rejecting those that have the X-SecondLife-Shard header.
If you need to enable this, set AllowHttpRequestIn = true in [Network] for all private services or individual [*Service] sections.
Diffstat (limited to '')
-rw-r--r--bin/Robust.HG.ini.example7
1 files changed, 7 insertions, 0 deletions
diff --git a/bin/Robust.HG.ini.example b/bin/Robust.HG.ini.example
index 5fa4026..872a7f8 100644
--- a/bin/Robust.HG.ini.example
+++ b/bin/Robust.HG.ini.example
@@ -153,6 +153,13 @@
153 ;; Hypergrid services are not affected by this; they are publicly available 153 ;; Hypergrid services are not affected by this; they are publicly available
154 ;; by design. 154 ;; by design.
155 155
156 ;; By default, scripts are not allowed to call private services via llHttpRequest()
157 ;; Such calls are detected by the X-SecondLife-Shared HTTP header
158 ;; If you allow such calls you must be sure that they are restricted to very trusted scripters
159 ;; (remember scripts can also be in visiting avatar attachments).
160 ;; This can be overriden in individual private service sections if necessary
161 AllowllHTTPRequestIn = false
162
156 ; * The following are for the remote console 163 ; * The following are for the remote console
157 ; * They have no effect for the local or basic console types 164 ; * They have no effect for the local or basic console types
158 ; * Leave commented to diable logins to the console 165 ; * Leave commented to diable logins to the console