[MGNLETK-131] uri-starts-with-sitename rule should be after handle-not-empty Created: 21/Sep/15 Updated: 25/Sep/15 Resolved: 25/Sep/15 |
|
| Status: | Closed |
| Project: | Extended Templating Kit (closed) |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Bug | Priority: | Neutral |
| Reporter: | Evzen Fochr | Assignee: | Unassigned |
| Resolution: | Won't Fix | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||||||||||
| Template: |
|
||||||||||||
| Acceptance criteria: |
Empty
|
||||||||||||
| Date of First Response: | |||||||||||||
| Description |
|
Move uri-starts-with-sitename rule right after handle-not-empty. |
| Comments |
| Comment by Milan Divilek [ 25/Sep/15 ] |
|
We don't want to do this by default. We want allow cross-site access by default especially on author instance. Who doesn't want allow cross-site access can easily change order of rules or configure cross-site fiter (https://documentation.magnolia-cms.com/display/DOCS/Cross-site+security) |