N°1354: use only hashed server side information as the local storage identifier.

SVN:trunk[5428]
This commit is contained in:
Denis Flaven
2018-03-14 16:25:00 +00:00
parent 03a6473bd4
commit b28c45c84c

View File

@@ -1089,13 +1089,14 @@ class Config
/** /**
* @return string identifier that can be used for example to name WebStorage/SessionStorage keys (they * @return string identifier that can be used for example to name WebStorage/SessionStorage keys (they
* are related to a whole domain, and a domain can host multiple itop) * are related to a whole domain, and a domain can host multiple itop)
* Beware: do not expose server side information to the client !
*/ */
public function GetItopInstanceid() public function GetItopInstanceid()
{ {
return utils::GetAbsoluteUrlAppRoot() return md5(utils::GetAbsoluteUrlAppRoot()
.'==='.$this->Get('db_host') .'==='.$this->Get('db_host')
.'/'.$this->Get('db_name') .'/'.$this->Get('db_name')
.'/'.$this->Get('db_subname'); .'/'.$this->Get('db_subname'));
} }
public function GetDescription($sPropCode) public function GetDescription($sPropCode)