diff options
| author | Andrew Arnott <andrewarnott@gmail.com> | 2009-08-04 21:32:53 -0700 |
|---|---|---|
| committer | Andrew Arnott <andrewarnott@gmail.com> | 2009-08-04 21:34:26 -0700 |
| commit | 469553aaa381cd1da2c26f7cd83ab5d3aac190a5 (patch) | |
| tree | 9de67257312cbe19e78ba50385b862b118766a57 | |
| parent | 7b4b94f2a37a95bd381f8e40376e8455ade259ce (diff) | |
| download | DotNetOpenAuth-469553aaa381cd1da2c26f7cd83ab5d3aac190a5.zip DotNetOpenAuth-469553aaa381cd1da2c26f7cd83ab5d3aac190a5.tar.gz DotNetOpenAuth-469553aaa381cd1da2c26f7cd83ab5d3aac190a5.tar.bz2 | |
Switching samples to Medium trust, since setting originUrl allows outbound HTTP to work.
| -rw-r--r-- | samples/OpenIdProviderWebForms/Web.config | 5 | ||||
| -rw-r--r-- | samples/OpenIdRelyingPartyWebForms/Web.config | 5 |
2 files changed, 6 insertions, 4 deletions
diff --git a/samples/OpenIdProviderWebForms/Web.config b/samples/OpenIdProviderWebForms/Web.config index 745cb2c..a6cd2eb 100644 --- a/samples/OpenIdProviderWebForms/Web.config +++ b/samples/OpenIdProviderWebForms/Web.config @@ -91,9 +91,10 @@ <!-- Trust level discussion: Full: everything works High: TRACE compilation symbol must NOT be defined - Medium/Low: doesn't work on default machine.config, because WebPermission.Connect is denied. + Medium: doesn't work unless originUrl=".*" or WebPermission.Connect is extended. + Low: doesn't work because WebPermission.Connect is denied. --> - <trust level="High" originUrl=""/> + <trust level="Medium" originUrl=".*"/> <pages> <controls> <add tagPrefix="asp" namespace="System.Web.UI" assembly="System.Web.Extensions, Version=3.5.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"/> diff --git a/samples/OpenIdRelyingPartyWebForms/Web.config b/samples/OpenIdRelyingPartyWebForms/Web.config index cc898b3..a4cb801 100644 --- a/samples/OpenIdRelyingPartyWebForms/Web.config +++ b/samples/OpenIdRelyingPartyWebForms/Web.config @@ -54,9 +54,10 @@ <!-- Trust level discussion: Full: everything works High: TRACE compilation symbol must NOT be defined - Medium/Low: doesn't work on default machine.config, because WebPermission.Connect is denied. + Medium: doesn't work unless originUrl=".*" or WebPermission.Connect is extended. + Low: doesn't work because WebPermission.Connect is denied. --> - <trust level="High" originUrl=""/> + <trust level="Medium" originUrl=".*"/> </system.web> <!-- log4net is a 3rd party (free) logger library that dotnetopenid will use if present but does not require. --> |