[MULTISITE-11] Path handle is stripped twice thus access to another site is sometimes possible Created: 20/Dec/13  Updated: 22/May/17  Resolved: 06/Jan/14

Status: Closed
Project: Magnolia Multisite Module
Component/s: None
Affects Version/s: None
Fix Version/s: 1.0.3

Type: Bug Priority: Neutral
Reporter: Ondrej Chytil Assignee: Jaroslav Simak
Resolution: Fixed Votes: 0
Labels: support
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Cloners
clones MGNLETK-112 Path handle is stripped twice thus ac... Closed
Relates
relates to MAGNOLIA-6882 Remove legacy code that allows to acc... Closed
relates to MULTISITE-12 Cross site access should not possible... Closed
dependency
depends upon MAGNOLIA-5589 Statement StringUtils.removeStart(han... Closed
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[ ]* Steps to reproduce, expected, and actual results filled
[ ]* Affected version filled

 Description   

With site settings
site1 mapped to page page1 and domain www.domain1.com
site2 mapped to page page2 and domain www.domain2.com
and CrossSiteSecurityFilter restricting access from one to another there is a way to access first level page from other domain by calling:
www.domain1.com/page1/page2
www.domain2.com/page2/page1


Generated at Mon Feb 12 06:05:33 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.