View Single Post
Posts: 334 | Thanked: 55 times | Joined on Aug 2007 @ Eastern Ontario, Canada
#10
Originally Posted by aleksandyr View Post
However, if you're running a web server on the device itself, you could have it kick off apps in response to some requests. I can help out with some Python code if you like. The security ramifications for this sort of thing range from major to epic, though...
I have been thinking about going this route, but instead of a web-server I thought about a custom json-rpc or xml-rpc server written in Python with the web page containing the Javascript client application being served as a local file.

Does this make sense? Basically, the rpc server is there as a proxy to provide local device services to the Javascript application.

If the rpc server validates that the only requests that it sees come from localhost and that the requesting page provides some sort of signature/authentication then how would I stand on security?