[Bug 616682] Serve plain ogv video files with Access-Control-Allow-Origin



https://bugzilla.gnome.org/show_bug.cgi?id=616682
  sysadmin | Git | unspecified

--- Comment #7 from Olav Vitters <bugzilla-gnome vitters nl> 2010-04-25 02:30:50 UTC ---
Do NOT remove the ETag. The information from the given URLs is wrong. I know
cgit allows etag to be turned off, I disagree that it should be done. FWIW, it
already loads the video files partly.

Claude: Apache is the server yes, but it isn't serving a file. It is handled by
a cgi program called cgit. This generates the headers.

Regarding Access-Control-Allow-Origin. I noticed that either Apache trunk or
something else makes mod_headers way more advanced. Advanced enough to allow it
AFAICS. But that version is not released and obviously not on RHEL5. Adding
that header for everything might introduce security problems as everything in
git will now be able to be accessed. Though we can limit it to l10n.gnome.org,
this would mean git relies on the security of l10n. I want to avoid that if
possible. Though if there really is no sane way (thought about patching cgit)
then maybe we'll have to do it.

-- 
Configure bugmail: https://bugzilla.gnome.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the QA contact of the bug.
You are watching the assignee of the bug.


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]