Changes between Version 7 and Version 8 of ClientDataModel

Timestamp:

Jul 19, 2011, 1:31:10 PM (14 years ago)

Author:

davea

Comment:

--

ClientDataModel

@@ -68 +68 @@
 The app must use file locking to ensure that two jobs
 don't try to generate the file at the same time.
+
+== Upload certificates ==
+
+Upload certificates are a mechanism to prevent upload server DoS attacks,
+and also to prevent an attack in which bad guys upload result files
+for other users' jobs.
+Currently no projects that I know of use this mechanism,
+but it is worth keeping available.
+
+Current: the upload certificate is a signature of the rest of
+the <file_info> element.
+
+Problem: this makes <file_info> elements sensitive to white space changes,
+and it makes it difficult to parse <file_info> using XML_PARSER.
+
+Solution: the upload certificate is a signature of
+{{{
+<name>x</name><max_nbytes>N</max_nbytes>
+}}}
+(no white space).
+
+== Server changes ==
+
+ * file_upload_handler: parse the request with XML_PARSER, then convert to above form