Disable Browser API Calls for Security

Discussions about Z-Way software and Z-Wave technology in general
Post Reply
dylancaponi
Posts: 19
Joined: 25 Jun 2014 12:47

Disable Browser API Calls for Security

Post by dylancaponi »

For security purposes, is it possible to disable the APIs that can communicate via js/browser requests and only retain the C API?

Otherwise, anyone on the local network could play with your zway settings using only a browser and the right url/command.
pofs
Posts: 688
Joined: 25 Mar 2011 19:03

Re: Disable Browser API Calls for Security

Post by pofs »

You can easily disable any network requests (or restrict them to specific hosts) with iptables rule.
Post Reply