Details
-
Bug
-
Resolution: Fixed
-
Critical
-
1.4.6
-
None
-
-
Empty show more show less
-
Yes
Description
With site settings
site1 mapped to page page1 and domain www.domain1.com
site2 mapped to page page2 and domain www.domain2.com
and CrossSiteSecurityFilter restricting access from one to another there is a way to access first level page from other domain by calling:
www.domain1.com/page1/page2
www.domain2.com/page2/page1
Checklists
Acceptance criteria
Attachments
Issue Links
- clones
-
MGNLETK-112 Path handle is stripped twice thus access to another site is sometimes possible
-
- Closed
-
- is related to
-
MAGNOLIA-5619 CLONE - Statement StringUtils.removeStart(handle, "/") is not assigned to the variable
-
- Closed
-