Details
-
Bug
-
Resolution: Fixed
-
Major
-
5.4
-
Unit
-
Unknown
-
N/A
-
N/A
-
Description
We get something like:
/xwikihttp://localhost:8080/xwiki/bin/...
This happens when the outbound rule modifies the context path. The reason is caused by some hack in XWikiAuthServiceImpl.stripContextPathFromURL() which tries to remove the context path to please the SecurityFilter framework we're using which seem to require relative URLs without context paths...
And the issue is that stripContextPathFromURL() doesn't take into account the possible effects of HttpServletResponse.encodeURL().
Attachments
Issue Links
- is related to
-
XWIKI-10364 Invalid redirect URL when using a context path with URL-escapable characters
- Closed
- relates to
-
XWIKI-11753 Invalid redirect login URL under some circumstances
- Closed