Details
-
Bug
-
Resolution: Fixed
-
Neutral
-
6.2.6
-
None
-
-
Empty show more show less
-
Yes
-
HL & LD 37, HL & LD 38
-
1
Description
Unauthorized requests may misleadingly return CORS error instead of their expected HTTP status. See MGNLREST-275 for details/steps to reproduce.
CORS filter should be before uriSecurity;
MAGNOLIA-7969 fixed this in 6.2.6 for upgrades, however the reordering was omitted for fresh installs.
Workaround
Move cors filter before uriSecurity
Development notes
See https://wiki.magnolia-cms.com/display/ARCHI/2021-01-06+Placement+of+CORS+filter
Checklists
Acceptance criteria
Attachments
Issue Links
- clones
-
-
- Closed
-
- is cloned by
-
-
- Closed
-
