[jira] [Created] (ARIES-1974) loopback addresses should not be replaced

["Markus Rathgeb (Jira)" <ji...@apache.org>]

Markus Rathgeb created ARIES-1974:
-------------------------------------

             Summary: loopback addresses should not be replaced
                 Key: ARIES-1974
                 URL: https://issues.apache.org/jira/browse/ARIES-1974
             Project: Aries
          Issue Type: Bug
          Components: jax-rs-whiteboard
    Affects Versions: jax-rs-whiteboard-1.0.5
            Reporter: Markus Rathgeb


The CXF code that is used by the implementation replaces the address "127.0.0.1" by localhost for the UriBuilder.

This can be disabled or enabled by an option but it defaults to true.

If the host is replaced and you build a "location created" reply using the URI builder the host used by the request and response can differ.

If the client that sends the request uses the response location to access a resource browser will block that request because of CORS.

For further details and examples please have a look at: https://issues.apache.org/jira/browse/CXF-8190

It would be great if the Aries JAX-RS Whiteboard implementation could set this option to false to allow expected URI builder usage:

{{replace.loopback.address.with.localhost=false}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)