Page 1 of 1

[SOLVED] Codebase warning foreign domain

Posted: 19 Feb 2021, 11:50
by GeroK
Hello,

how can we get rid of this warnings?
See attachment.

Tried deployment.security.whitelist but this wasn't a good plan because of all other domains
not on whitelist are then direct blocked. Yeah, i know....whitelist.... ;)

Best regards!

Gero

Re: Codebase warning foreign domain

Posted: 19 Feb 2021, 11:51
by Stephan Classen
You can safe the decision by selecting the checkbox on the very bottom of the dialog.

Re: Codebase warning foreign domain

Posted: 19 Feb 2021, 11:59
by GeroK
Hi Stephan,

unfortunately not.
This option is not working in our environment.
I think the problem is our provisioned XenApp farm.
So i need a global option to disable this or set a global execption.
But i can't find how to do this...

Gero

Re: Codebase warning foreign domain

Posted: 19 Feb 2021, 13:20
by Stephan Classen
In the deployment.properties (per user or system wide) you can add the following line:

deployment.security.level=ALLOW_UNSIGNED

This will disable a series of security checks including the one causing the warning you see

Re: [SOLVED] Codebase warning foreign domain

Posted: 19 Feb 2021, 14:55
by GeroK
Hmmm....
"Disable a series of security checks" sounds to heavy for me.
I dont't want to lower the overall security level of OWS...

Disable this only for specific applets or websites is not possible?
Maybe on the roadmap for future releases?

Greetings!
Gero

Re: [SOLVED] Codebase warning foreign domain

Posted: 20 Feb 2021, 06:30
by Janak Mulani
Please have a look at viewtopic.php?f=21&t=180

Re: [SOLVED] Codebase warning foreign domain

Posted: 22 Feb 2021, 11:50
by GeroK
Edit 22.02.2021

Unfortunately it does not work with responsefile.jar

If i put "deployment.manifest.attributes.check= PERMISSIONS,CODEBASE,TRUSTED,ENTRYPOINT" direct into deployment.properties it works.
But if i put this into the response.varfile the line is missing in the new generatet deployment.propertys user file.

Every other thingl linke proxy etc. are in the new deployment.properties... :/

@Janak Can you give me a hint why?

Gero

----------------------------------
Hi Janak,

thank you!

Problem solved.

But i had to disable ALAC to get rid of this warning.

PERMISSIONS, CODEBASE, TRUSTED, and ENTRYPOINT checks are still activated.

Greetings,
Gero

Re: [SOLVED] Codebase warning foreign domain

Posted: 22 Feb 2021, 15:20
by Stephan Classen
Yes this is currently missing.
We will add this property with the next release of OWS

Re: [SOLVED] Codebase warning foreign domain

Posted: 22 Feb 2021, 16:03
by GeroK
OK. Thank you for information :)