Note on need for capabilities.

2013-02-04 10:06:34 -05:00 · 2013-02-04 10:06:34 -05:00 · 1fe602c2d0
parent 9e2d33aa99
commit 1fe602c2d0
1 changed files with 3 additions and 0 deletions
--- a/server/TODO
+++ b/server/TODO
@ -14,6 +14,9 @@

 ## OCaml server

+ - Make the webserver listen on a random URL to avoid cross-site scripting
+   attacks on localhost from malicious random internet webpages.
+
 - use lazy and Lazy.force where appropriate

 - Figure out how to avoid the overhead of Message.message_of_sexp