Uploaded image for project: 'XWiki Platform'
  1. XWiki Platform
  2. XWIKI-20549

Provide a new script service API to check trustfulness of an URI

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Major
    • 14.10.4, 15.0
    • 14.10.3
    • Security, URLs
    • None
    • Unit
    • Unknown

    Description

      We introduced with XWIKI-10309 the capability to check if an URL belongs to a trusted domain, but we never provided a script service for checking it.
      It can be useful if some scripts want to ensure that the indicated URL can be properly followed.

      Attachments

        Issue Links

          blocks

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-20096 Open Redirect vulnerability discovered in the latest XWiki platform

          • Major - Major loss of function.
          • Closed

          Improvement - An improvement or enhancement to an existing feature or task. XWIKI-20583 Provide a macro for sanitizing URLs in templates

          • Major - Major loss of function.
          • Closed
          causes

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-20615 $response.sendRedirect repair too much

          • Blocker - Blocks development and/or testing work, production could not run.
          • Closed
          depends on

          Bug - A problem which impairs or prevents the functions of the product. XWIKI-20571 Livetable parameters cannot be recovered with URI encoding

          • Major - Major loss of function.
          • Closed

          Activity

            People

              surli Simon Urli
              surli Simon Urli
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: