You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tapestry.apache.org by "Brian K. Wallace (JIRA)" <ta...@jakarta.apache.org> on 2006/04/26 03:04:04 UTC

[jira] Resolved: (TAPESTRY-843) Friendly URL documentation concerning security and ugly URLs

     [ http://issues.apache.org/jira/browse/TAPESTRY-843?page=all ]
     
Brian K. Wallace resolved TAPESTRY-843:
---------------------------------------

    Fix Version: 4.0.3
     Resolution: Fixed
      Assign To: Brian K. Wallace

Applied patch to documentation.

> Friendly URL documentation concerning security and ugly URLs
> ------------------------------------------------------------
>
>          Key: TAPESTRY-843
>          URL: http://issues.apache.org/jira/browse/TAPESTRY-843
>      Project: Tapestry
>         Type: Bug

>   Components: Documentation
>     Versions: 4.0
>  Environment: All
>     Reporter: Brian K. Wallace
>     Assignee: Brian K. Wallace
>      Fix For: 4.0.3
>  Attachments: Patch for Friendly URL security concern.patch
>
> The friendly URL documentation implies that enabling of friendly URLs is a way to enable security for Tapestry generated URLs. While this part of the documentation is correct, it implies that the 'ugly' URLs are no longer accessible - thereby enabling security for Tapestry sites. This is not correct and should be documented (at the very least).
> Ideally, there should be a method in the framework itself that would disable access to the original URLs if the friently URL contribution is made.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: tapestry-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: tapestry-dev-help@jakarta.apache.org