Re: [basex-talk] limiting time or space resources in calls to xquery:eval() ?

On Fri, 2013-06-28 at 10:20 +0200, Christian Grün wrote:

[...] If you want to avoid that the BaseX server is visible and can be controlled from outside, you can e.g. restrict the SERVERHOST option to localhost [1,2].

I do that on fromoldbooks.org, but when I upgraded basex it of course started using a different conf file (without me realising) and became insecure. It would be better if listening on localhost could be the default: make packages reasonably secure by default.

Liam