Jump to content
We've recently updated our Privacy Statement, available here ×

jlin

Members
  • Posts

    13
  • Joined

  • Last visited

 Content Type 

Profiles

Forum

Events

Featured Visualizations

Knowledge Base

Documentation (PDF Downloads)

Blog

Documentation (Test Area)

Documentation

Dr. Jaspersoft Webinar Series

Downloads

Posts posted by jlin

  1. Lucian,

     

    The "curlink" example i gave is already a concrete case. I can send your a detail sample report offline, but not here when everyone can get an idea on how to hack our server. I already implemented a work around for this already. But an ultimate fix from Jasper would be nice.

     

    Jason

  2. Hi,

    I have put JasperServer OS edition through security tests and found out there might be some "cross site scripting" or 'link injection' vulnerabilities.  In other words, I could use "curlnk" or some other commonly used parameters and pass in some java script or links to be presented or "injected" into the result page. 

     

    Does anyone have similar problem?

     

    thanks.

  3. I implemented a custom UserDetailsService based on org.acegisecurity.userdetails.UserDetailsService with a custom UserDetail implementation. I also additional methods such as getFullName(), getEmailAddress() or getTelephoneNumber().

     

    1. somehow getFullName() and getEmailAddress() are not being used by JasperServer to populate JIUser table

     

    2. How can I make an custom added method, getTelephoneNumber available to be used in a report as a parameter.

     

    Thanks for you help.

  4. Starting another thread...

    JasperServer relies on the application server capabilities and networking environment for load balancing, fail over and session replication.

    We have configured JasperServer to run in a completely clustered environment. Session replication does work, but makes the environment very slow. We usually use pinned sessions instead.

    Sherman
    JasperSoft

     

    Is there a procedure in configure JasperServer itself to work in the cluster environment? I can't seem to find any document.

     

    thanks,

    Jason

×
×
  • Create New...