You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Sometimes a path will show up as an allowed destination hostname in the menu. I finally found a repeatable (for the moment) example of this happening and it appears to be with a 303 Object Moved redirect to a location that is just a path (no protocol + host).
Example with some specifics removed (so you don't know what coupon my wife wanted me to print):
which appears to match what I see in the !RequestPolicy menu.
However, it seems like there must be more to it as one would think this would be fairly common and so the bug would have been visible more frequently. I'll need to come up with a repeatable test case to be sure that this is the issue.
The text was updated successfully, but these errors were encountered:
Sometimes a path will show up as an allowed destination hostname in the menu. I finally found a repeatable (for the moment) example of this happening and it appears to be with a 303 Object Moved redirect to a location that is just a path (no protocol + host).
Example with some specifics removed (so you don't know what coupon my wife wanted me to print):
http://coupons2.smartsource.com/smartsource/index.jsp?Link=XXXXXXX
elicited the following Location header in the response:
Location: /YYYYYYY/dcs.gif?dcsredirect=126&dcstlh=0&...
which appears to match what I see in the !RequestPolicy menu.
However, it seems like there must be more to it as one would think this would be fairly common and so the bug would have been visible more frequently. I'll need to come up with a repeatable test case to be sure that this is the issue.
The text was updated successfully, but these errors were encountered: