Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Already on GitHub? Sign in to your account

Ability to prevent auto generated Javascript proxies #978

Closed
raybooysen opened this Issue Nov 18, 2012 · 6 comments

Comments

Projects
None yet
5 participants

Currently hitting /signalr/hubs, you'll see a javascript file that details each hub that is available on the server. This is akin to providing a malicious user with a directory listing of your website.

It would be great if this auto generated javascript file could be turned off to stop this sort of information leakage.

Thanks

Owner

davidfowl commented Nov 18, 2012

So you want to be able to use the hubConnection api but not have the proxy generated? If you really wanted to, you can do that today by registering a custom IJavaScriptProxyGenerator and returning empty string.

Essentially yes. Is it worth keeping this open to have support for this later?

Owner

davidfowl commented Nov 18, 2012

There's support for it now.

@ghost ghost assigned davidfowl Dec 11, 2012

Owner

DamianEdwards commented Dec 18, 2012

Let's add a parameter to MapHubs to enable/disable the runtime proxy generation

@ghost ghost assigned halter73 Dec 18, 2012

@halter73 halter73 added a commit that referenced this issue Jan 3, 2013

@halter73 halter73 Added an easy way to disable the generation of JS Hub proxies
As indicated in #978, the autogenerated JS Hub proxies leak information.

To disable this, set DisableJavaScriptProxies property of the application's
IConfigurationManager to true.
7e974f4

@halter73 halter73 added a commit that referenced this issue Jan 3, 2013

@halter73 halter73 Added an easy way to disable the generation of JS Hub proxies
As indicated in #978, the autogenerated JS Hub proxies leak information.

To disable this, set DisableJavaScriptProxies property of the application's
IConfigurationManager to true.
9b1784f

@halter73 halter73 added a commit that referenced this issue Jan 4, 2013

@halter73 halter73 Added an easy way to disable the generation of JS Hub proxies
As indicated in #978, the autogenerated JS Hub proxies leak information.

To disable this, set DisableJavaScriptProxies property of the application's
IConfigurationManager to true.
0ef8f38

@halter73 halter73 added a commit that referenced this issue Jan 5, 2013

@halter73 @davidfowl halter73 + davidfowl Added an easy way to disable the generation of JS Hub proxies
As indicated in #978, the autogenerated JS Hub proxies leak information.

To disable this, set DisableJavaScriptProxies property of the application's
IConfigurationManager to true.
41c7d97
Owner

davidfowl commented Jan 6, 2013

Fixed in dba49ab

@rustd rustd closed this Jan 9, 2013

Thanks guys appreciated.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment