https://bz.apache.org/bugzilla/show_bug.cgi?id=57856
Bug ID: 57856
Summary: RemoteIpFilter does not replace Request within
Response
Product: Tomcat 8
Version: trunk
Hardware: PC
Status: NEW
Severity: major
Priority: P2
Component: Connectors
Assignee: [email protected]
Reporter: [email protected]
I've noticed an issue with the org.apache.catalina.connector.Response where the
toAbsolute method called during a relative redirect is generating the wrong
absolute uri.
If you enable the org.apache.catalina.filters.RemoteIpFilter to allow an
upstream proxy to control whether the server is available over HTTP/HTTPS by
setting an header such as "X-Forwarded-Proto", this state is not replicated
within the Response.
Therefore, when the uri is generated, the scheme is not replaced with the value
that is actually available within the Request so it will generate for HTTP
scheme only.
I believe the RemoteIpFilter should also implement a wrapper for the Response
on the sendRedirect method to correctly generate the URI.
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
