EPIC Web Utilities -- COVER Restrictions The scripts must be listed in the file cover.scripts This prohibits the execution of arbitrary scripts In fact, only approved combinations of shell and script are allowed The COVER executable must reside on the system where the script will execute

COVER home Why you should use COVER Alternatives to COVER Input and Output Restrictions Step-by-step instructions Small examples Big examples 'How-to' description

• Input names are restricted to "p1" .. "p16"
  • INPUT TYPE="IMAGE" can't yet be used with COVER (because of resulting forms input names like "map.x" and "map.y")
  • A future version will allow arbitrary names

• security issues
  • These special characters are escaped with backslash (\):
    • ampersand - &
    • semicolon - ;
    • apostrophe - '
    • vertical bar - |
    • backslash - \
  • The backquote character (`) is deleted
  • Without cover.scripts, arbitrary scripts on your system could be executed
    • These scripts may reside outside the htdocs directory tree

---

If you have any questions about COVER utility please contact: epic@pmel.noaa.gov or Mark Renton (the author).