On Thu, 10 Aug 2006, Mark Taylor wrote:
> I presume this is a good idea in general. It may in fact be the
> most sensible PLASTIC way to do Starlink-specific things like
> "load an NDF into GAIA", as previously discussed. There is however
> an issue of security - PLASTIC has practically none, so in principle
> you could get third parties executing malicious arbitrary Tcl code
> on a remote machine running GAIA. For this reason I'll take it
you already can using the straight socket. Is the problem that PLASTIC
uses a port that would ordinrily be left open in a firewall? Or is the
problem that TOPCAT was going to make this all trivial by popping up a
"please supply arbitrary code for GAIA to execute" popup?
GAIA is the thing that needs the sanity checking. It would indeed be the
easiest way to support ORAC-DR switching to PLASTIC with the fewest
modifications (since oracdr does things like adjusts the display range
after loading an image).
--
Tim Jenness
JAC software
http://www.jach.hawaii.edu/~timj
|