Item14405: Redirect after validation with HTTPS proxy for HTTP site results in unsafe redirect.

Priority: Urgent
Current State: Closed
Released In: 2.1.4
Target Release: patch

Applies To: Engine
Component: FoswikiRequest
Branches: Release02x01 master Item14288

Reported By: GeorgeClark
Waiting For:
Last Change By: GeorgeClark

The problem is that Foswiki::Request->url() fails to account for the protocol when reconstructing the URL from a proxy.

Solution, honor the {ForceDefaultUrlHost} flag in Foswiki::Request->url(). This will cause the correct protocol and hostname to be used.

-- GeorgeClark - 23 May 2017

Summary	Redirect after validation with HTTPS proxy for HTTP site results in unsafe redirect.
ReportedBy	GeorgeClark
Codebase	2.1.4 RC1, 2.1.3, trunk
SVN Range
AppliesTo	Engine
Component	FoswikiRequest
Priority	Urgent
CurrentState	Closed
WaitingFor
Checkins	distro:de3aafcb8c2c
TargetRelease	patch
ReleasedIn	2.1.4
CheckinsOnBranches	Release02x01 master Item14288
trunkCheckins
masterCheckins	distro:de3aafcb8c2c
ItemBranchCheckins	distro:de3aafcb8c2c
Release02x01Checkins	distro:de3aafcb8c2c
Release02x00Checkins
Release01x01Checkins