The <access> Element

The <access> element provides a simple form of access control for a deck. This allows a deck to specify that only certain other decks may link to it (these decks are known as referring URLs). Since this control is performed in the browser, not the server, there is no real security in this mechanism, and hence it’s probably of limited use. There may be no more than one <access> element in a deck, and it must be the first thing inside the <head> element.

Attributes of the <access> Element

domain (string; optional; default same as deck’s domain)

Specifies the domain (effectively, the range of servers) from which the referring deck must come. This must match against whole components (parts of the name between dots) at the end of the server name. If this attribute is omitted, its value defaults to the server from the new deck’s URL.

For example, if the attribute domain="wml.wap.net" is specified:

wml.wap.net

Matches; access is permitted.

www.wml.wap.net

Matches; access is permitted.

www.test.wml.wap.net

Matches; access is permitted.

wapforum.org

Doesn’t match; access is denied.

wap.net

Doesn’t match the whole domain; access is denied.

otherwml.wap.net

otherwml doesn’t match wml (must match whole components); access is denied.

path (string; optional; default /)

Specifies the path within the referring URL that must match. (The path is the part of the URL that specifies a file or directory on the server.) This must match against whole compo nents (parts between slashes) ...

Get Learning WML, and WMLScript now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.