LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 05-01-2009, 07:42 PM   #1
crackpipe
Member
 
Registered: Nov 2005
Location: Berkeley, CA
Distribution: Slackware, Arch, Zenwalk (pre-2012)
Posts: 41

Rep: Reputation: 15
xss restriction, javascript - local disk


This might be obscure. I want to use my browser as a local GUI to launch local bash scripts against my local database. Using the database and the browser interface,I can index and access files on my local hard drive with advantages of 1) including metadata or whatever I want in the resultant graphical display in the browser (rather than just the file name in graphical file managers) and, 2) via html and css, results are formatted the way I desire them (instead of tty text in terminal-based bash queries). Of course, I could set-up a LAMP, but that seems like extreme overkill, more or less creating an enterprise Apache environment and CGI scripts simply to arrange data on my local hard drive. I'd like to do it simply and cleanly with just Javascript, my browser, bash scripts, and my database, all local.

Why am I asking in this forum? Staying client-side means sticking with Javascript, not PHP, since PHP is server-side. Yet Javascript xss/sandbox limitations seem to prevent using bash or otherwise accessing my local drive. If that's correct, it's a security issue that I'd like to circumvent locally, or at least know there is no way to circumvent, and relent to making a localhost LAMP. A secondary security question then arises: server stuff (Apache and CGI scripts) seem to have associated security problems running on localhost. For security and simplicity, I'd like to avoid all of that, doing everything through the browser and javascript, loading local files in the format "file:///home/foo/foobar.html", and making calls to Bash scripts where necessary to retrieve data. Can this be done?

Hope this makes sense. Thanks.

Last edited by crackpipe; 05-02-2009 at 01:44 PM. Reason: clarification
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
postfix local users send mail restriction y_zl Linux - Security 3 01-05-2009 12:04 AM
xss checkin rubadub Programming 2 04-28-2008 05:16 PM
how can i add a local Folder on local Hard Disk as Yum Repository ?? vahid_p Fedora 4 02-22-2007 11:43 AM
Apache XSS prevention abhijeetudas Linux - Security 5 03-22-2005 04:37 PM
Disk size restriction gauol Linux - General 1 07-27-2004 04:52 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 11:20 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration