Uploaded image for project: 'Magnolia Multisite Module'
  1. Magnolia Multisite Module
  2. MULTISITE-11

Path handle is stripped twice thus access to another site is sometimes possible

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Neutral
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: 1.0.3
    • Labels:
    • Magnolia Release:
      5.2.2

      Description

      With site settings
      site1 mapped to page page1 and domain www.domain1.com
      site2 mapped to page page2 and domain www.domain2.com
      and CrossSiteSecurityFilter restricting access from one to another there is a way to access first level page from other domain by calling:
      www.domain1.com/page1/page2
      www.domain2.com/page2/page1

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                jsimak Jaroslav Simak
                Reporter:
                ochytil Ondrej Chytil
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: