You are viewing a plain text version of this content. The canonical link for it is here.

Posted to dev@knox.apache.org by "Attila Magyar (Jira)" <ji...@apache.org> on 2022/10/20 08:16:00 UTC

[jira] [Created] (KNOX-2827) isDispatchAllowed should cut off path segments from the URL

Attila Magyar created KNOX-2827:
-----------------------------------

             Summary: isDispatchAllowed should cut off path segments from the URL
                 Key: KNOX-2827
                 URL: https://issues.apache.org/jira/browse/KNOX-2827
             Project: Apache Knox
          Issue Type: Bug
            Reporter: Attila Magyar
            Assignee: Attila Magyar
             Fix For: 2.0.0


In isDispatchAllowed we check the full URL against the whitelist regexp (including /path, but not including query parameters) which raises security concenrs.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)