Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't use absolute URI for the login page forward call #696

Merged
merged 2 commits into from Feb 28, 2017

Conversation

stuartwdouglas
Copy link
Contributor

No description provided.

Copy link
Contributor

@darranl darranl left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a small comment regarding a possible path to a redirect that is missing a URI.

sb.append(requestURI.getHost());
sb.append(':').append(requestURI.getPort());
sb.append(loginPage);
sendPage(sb.toString(), request, response);
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I see why you have needed to remove this as we need to cope with both a forward and direct resource access within sendPage but at the very end of sendPage we fall through so sendRedirect I think we need it to be back to a URI at that point.

@fjuma fjuma added the +1 FJ label Feb 28, 2017
@fjuma fjuma merged commit 20a1f27 into wildfly-security:master Feb 28, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
3 participants