[X3D-Public] [x3dom-developers] on demand loading of inline nodes; security implications

[Don Brutzman]

cc: x3d-public list

Thanks for the details Max and Andreas.  Yes the original motivation for controlled loading was for controlling performance of large tile trees.  (GeoInline was then merged into Inline for simplicity.)

One of our planned tasks for the coming year, as part of X3D v3.4 development, is to perform a security review of the full X3D specification.

Controlling Inline loading definitely sounds like a feature that authors might want to use for security purposes, allowing authors to give users strict control of when a scene retrieval or query is made.  There are a number of cases where users want to control when their web browser retrieves content.

I expect that we will begin collecting such issues of interest on the wiki and making X3D Security a weekly topic on the working group teleconferences.  Further insights are always welcome.


On 11/27/2014 4:30 AM, Limper, Max wrote:
> Hi,
>
> I don’t think it was a design decision not to support the „load“ field. It’s simply not implemented.
>
> Regards,
>
> Max
>
> *Von:*Andreas Plesch [mailto:andreasplesch at netscape.net]
> *Gesendet:* Mittwoch, 26. November 2014 19:13
> *An:* x3dom-developer mlist
> *Betreff:* [x3dom-developers] on demand loading of inline nodes
>
> For large scenes it would be convenient or necessary to control the loading (downloading and adding to the scene graph) of provided inline nodes either by x3d facilities or by javascript. Is this possible ? Is there then a way to unload inline nodes when they are not required anymore ? Unloading would be different from removing the node completely in that only the previously added (children) nodes from the inline scene are removed but not the inline node itself.
>
> I noticed in the example below that all inline nodes used in a LOD are downloaded and added to the scene even when they are not yet in range:
>
> https://googledrive.com/host/0BwIhFzkLaQ9XSWh1cGZRdlBZZm8/Mars.xhtml
>
> The initial loading of the inline nodes happens early when the node is first encountered. It is necessary that this is the default behaviour for nodes in general. To override this, inline nodes have a field called 'load' which is supposed to prevent immediate loading when set to false but it does not seem to be supported. If it is not, was there a design decision to not have this capability ?
>
> Thanks, Andreas

all the best, Don
-- 
Don Brutzman  Naval Postgraduate School, Code USW/Br       brutzman at nps.edu
Watkins 270,  MOVES Institute, Monterey CA 93943-5000 USA   +1.831.656.2149
X3D graphics, virtual worlds, navy robotics http://faculty.nps.edu/brutzman