aries-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Markus Rathgeb (Jira)" <j...@apache.org>
Subject [jira] [Created] (ARIES-1974) loopback addresses should not be replaced
Date Fri, 14 Feb 2020 17:55:00 GMT
Markus Rathgeb created ARIES-1974:
-------------------------------------

             Summary: loopback addresses should not be replaced
                 Key: ARIES-1974
                 URL: https://issues.apache.org/jira/browse/ARIES-1974
             Project: Aries
          Issue Type: Bug
          Components: jax-rs-whiteboard
    Affects Versions: jax-rs-whiteboard-1.0.5
            Reporter: Markus Rathgeb


The CXF code that is used by the implementation replaces the address "127.0.0.1" by localhost
for the UriBuilder.

This can be disabled or enabled by an option but it defaults to true.

If the host is replaced and you build a "location created" reply using the URI builder the
host used by the request and response can differ.

If the client that sends the request uses the response location to access a resource browser
will block that request because of CORS.

For further details and examples please have a look at: https://issues.apache.org/jira/browse/CXF-8190

It would be great if the Aries JAX-RS Whiteboard implementation could set this option to false
to allow expected URI builder usage:

{{replace.loopback.address.with.localhost=false}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Mime
View raw message