You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
My understanding is that the pb-mathjax service is needed for the exports, not the webooks. So, only the Pressbooks IP should be able to access the pb-mathjax service, which it uses when generating images of equations for PDF/EPUB exports. If the pb-mathjax service is set up to accept an open range of requests, then it essentially becomes a public, MathJax image renderer.
The Problem
The MathJax settings page has a de-facto test section, which advertises to the end user if the service is set up correctly or not:
(Equation appears when the pb-mathjax service accepts open range requests)
However, this test is implemented by generating an <img> element whose source is a call to the to the configured pb-mathjax service. The problem here is that if the pb-mathjax service is set up correctly behind a firewall, then this request will come from the client's non-approved IP, the image will not appear, and the end-user will be under the impression that the service is malfunctioning.
Set up firewall for service in step one that gives access to the PB applications in use
Navigate to to the MathJax Settings page
Instead of a big integral, user sees markup/encoding for pb-mathjax service
Expected behavior:
As a test page, it would be ideal for the PB server to send some kind of "status" query to the pb-mathjax server, and report back to the user if PB can communicate with its pb-mathjax service.
Actual behavior:
Instead, the test sees if the user can communicate with the service, which they should not be able to.
(Result when IP range is restricted)
The text was updated successfully, but these errors were encountered:
Prerequisites
Description
Preamble
My understanding is that the pb-mathjax service is needed for the exports, not the webooks. So, only the Pressbooks IP should be able to access the pb-mathjax service, which it uses when generating images of equations for PDF/EPUB exports. If the pb-mathjax service is set up to accept an open range of requests, then it essentially becomes a public, MathJax image renderer.
The Problem
The MathJax settings page has a de-facto test section, which advertises to the end user if the service is set up correctly or not:
(Equation appears when the pb-mathjax service accepts open range requests)
However, this test is implemented by generating an
<img>
element whosesource
is a call to the to the configured pb-mathjax service. The problem here is that if the pb-mathjax service is set up correctly behind a firewall, then this request will come from the client's non-approved IP, the image will not appear, and the end-user will be under the impression that the service is malfunctioning.Steps to Reproduce
Expected behavior:
As a test page, it would be ideal for the PB server to send some kind of "status" query to the pb-mathjax server, and report back to the user if PB can communicate with its pb-mathjax service.
Actual behavior:
Instead, the test sees if the user can communicate with the service, which they should not be able to.
(Result when IP range is restricted)
The text was updated successfully, but these errors were encountered: