{"action":"created","issue":{"url":"https://api.github.com/repos/OHDSI/Olympus/issues/9","labels_url":"https://api.github.com/repos/OHDSI/Olympus/issues/9/labels{/name}","comments_url":"https://api.github.com/repos/OHDSI/Olympus/issues/9/comments","events_url":"https://api.github.com/repos/OHDSI/Olympus/issues/9/events","html_url":"https://github.com/OHDSI/Olympus/issues/9","id":74109396,"number":9,"title":"Olympus in a hosted environment (i.e. non localhost)","user":{"login":"alexfranken","id":5394963,"avatar_url":"https://avatars.githubusercontent.com/u/5394963?v=3","gravatar_id":"","url":"https://api.github.com/users/alexfranken","html_url":"https://github.com/alexfranken","followers_url":"https://api.github.com/users/alexfranken/followers","following_url":"https://api.github.com/users/alexfranken/following{/other_user}","gists_url":"https://api.github.com/users/alexfranken/gists{/gist_id}","starred_url":"https://api.github.com/users/alexfranken/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexfranken/subscriptions","organizations_url":"https://api.github.com/users/alexfranken/orgs","repos_url":"https://api.github.com/users/alexfranken/repos","events_url":"https://api.github.com/users/alexfranken/events{/privacy}","received_events_url":"https://api.github.com/users/alexfranken/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-05-07T20:05:11Z","updated_at":"2015-05-26T16:28:12Z","closed_at":null,"body":"Due to XSS (cross-site scripting) measures, we need the applications (js files to have the same ajax url host as the origin).  This only thing I can think of is to mandate building from source, using maven filtering.  Currently, Olympus is only accessible via localhost due to the javascript nature of the apps and cross-site scripting.\r\n\r\nCreate a maven property to drive this, so that it can filtered throughout the identified webresources (each application js config file(s)).  For example, `mvn clean package -Dolympus.local.address=http://myserver.com:20000`\r\n\r\nWe need a 'origin' property = protocol+host[+port].  This will drive the endpoint the applications use (to determine the service layer url(s)), in addition to the WebAPI baseUri (e.g. origin+ /WebAPI)."},"comment":{"url":"https://api.github.com/repos/OHDSI/Olympus/issues/comments/105592317","html_url":"https://github.com/OHDSI/Olympus/issues/9#issuecomment-105592317","issue_url":"https://api.github.com/repos/OHDSI/Olympus/issues/9","id":105592317,"user":{"login":"alexfranken","id":5394963,"avatar_url":"https://avatars.githubusercontent.com/u/5394963?v=3","gravatar_id":"","url":"https://api.github.com/users/alexfranken","html_url":"https://github.com/alexfranken","followers_url":"https://api.github.com/users/alexfranken/followers","following_url":"https://api.github.com/users/alexfranken/following{/other_user}","gists_url":"https://api.github.com/users/alexfranken/gists{/gist_id}","starred_url":"https://api.github.com/users/alexfranken/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexfranken/subscriptions","organizations_url":"https://api.github.com/users/alexfranken/orgs","repos_url":"https://api.github.com/users/alexfranken/repos","events_url":"https://api.github.com/users/alexfranken/events{/privacy}","received_events_url":"https://api.github.com/users/alexfranken/received_events","type":"User","site_admin":false},"created_at":"2015-05-26T16:28:12Z","updated_at":"2015-05-26T16:28:12Z","body":"Still TODO, consider relative iframe 'data-src' attributes and/or somehow filtering the velocity template file."}}