In light of the security warning GHSA-4g9f-ph64-hg2, would it be a good idea to create a flag to explicitly enable the built-in OpenLayers function? I was a bit surprised that every client can activate it via the OGC format parameter. It doesn't appear in the capabilities list and behaves like a hidden feature.
A suggestion for the MapServer Environment Variables:
CONFIG "MS_OPENLAYERS_ENABLE" "1"
In light of the security warning GHSA-4g9f-ph64-hg2, would it be a good idea to create a flag to explicitly enable the built-in OpenLayers function? I was a bit surprised that every client can activate it via the OGC format parameter. It doesn't appear in the capabilities list and behaves like a hidden feature.
A suggestion for the MapServer Environment Variables: