History | Log In     View a printable version of the current page.  
Issue Details (XML | Word | Printable)

Key: UP-1839
Type: Bug Bug
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Eric Dalquist
Reporter: Susan Bramhall
Votes: 0
Watchers: 0
Operations

If you were logged in you would be able to see more operations.
uPortal

null referrer should not be allowed when check referrer is on

Created: 02/Oct/07 02:34 PM   Updated: 19/Oct/07 05:43 PM
Component/s: Resource Proxy
Affects Version/s: 2.5.3.1
Fix Version/s: 2.6.1

Original Estimate: Unknown Remaining Estimate: Unknown Time Spent: Unknown
Issue Links:
Cloners
 
This issue Clones:
UP-1836 null referrer should not be allowed w... Major Closed


 Description  « Hide
Index: C:/workspace/uPortal-2-6/source/org/jasig/portal/HttpProxyServlet.java
===================================================================
--- C:/workspace/uPortal-2-6/source/org/jasig/portal/HttpProxyServlet.java (revision 42318)
+++ C:/workspace/uPortal-2-6/source/org/jasig/portal/HttpProxyServlet.java (working copy)
@@ -80,6 +80,12 @@
      return;
      }
 
+ } else /* referer is null so don't return element */ {
+ if (log.isWarnEnabled()) {
+ log.warn("HttpProxyServlet: bad Referer: " + referer);
+ }
+ response.setStatus(404);
+ return;
         }
  }
 


 All   Comments   Work Log   Change History      Sort Order:
Susan Bramhall [19/Oct/07 05:43 PM]
duplicate.