Personal tools

Blacklist / Whitelist Tests

From OpenLaszlo

The purpose of this page is to describe the tests required to validate the server proxy security functionality.

OLS has cofiguration for blacklisting and whitelisting backend server requests.

in WEB-INF/lps/config/lps.xml you can configure OLS to allow or deny proxied connections to backend servers.

   <application path="/demos/amazon/amazon.lzx">
       <option name="proxy-security-urls">
          <deny>
            <pattern>http://.*\.amazon\.com/.*</pattern>
          </deny>
       </option>
   </application>  

would deny access to all of *.amazon.com

Adding this node should completely break the amazon demo app.