[Galene] Re: Behind reverse proxy, not at the root

[Juliusz Chroboczek <jch@irif.fr>]

> Each application has its own path. For example, I have a file server
> located at https://myhost.com/files and a streaming service at
> https://myhost.com/stream.
> 
> Each application has some configuration option to tell it that they
> are not located at the root, but rather under some path like /files or
> /stream.
> 
> However, I've not found how to do that with Galene. Is there an option
> to this that I missed?

No, it's not currently supported.  It wouldn't be too difficult to do, as
usual it's testing that's a pain.  (Galene has a fairly extensive set of
units tests for low-level functionality, but there are no high-level tests
of the server as a whole, so I need to test manually with each release.
So the more configuration options we add, the more testing I need to do.)

I'll think it over, but no promises.

(Off topic, but are you aware that by doing that you defeat sandboxing?
HTML5 performs sandboxing on a per-origin basis, not a per-subtree basis,
so when multiple applications are running on the same domain, a security
flaw in just one of the applications will allow exploitation of all of
them.  For example, an XSS vulnerability in your files application will
allow an attacker to exfiltrate Galene's passwords.  The more secure
configuration is to use a different hostname for each application,
files.example.org, stream.example.org, etc.)


-- Juliusz