Maybe it's best to resort to inline javascript in these two cases? This
would solve the issues without creating a security risk.


On 20 February 2013 08:55, John Lyle <notifications@github.com> wrote:

> In webinos/core/pzhweb/public/js/view-enroll-pzp.js:
>
> > @@ -0,0 +1,46 @@
> > +var channel;
> > +try {
> > +	channel = new window.WebSocket("ws://localhost:<%=pzpPort%>");
>
> In this case, we *need* the pzpPort to be dynamic. When a PZP is enrolled
> with a PZH, this step is necessary in order for the PZH to make the
> connection with the PZP and pass over some credentials. And as we don't
> know the port that the PZP will be using, we need it to be set by the
> PZP...
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/webinos/Webinos-Platform/pull/471/files#r3076867>.
>
>