[ 
https://issues.apache.org/jira/browse/ROL-2002?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14021778#comment-14021778
 ] 

Glen Mazza commented on ROL-2002:
---------------------------------

Yes and no.  We check that the entered email is syntatically valid but don't 
test it first by sending an email to what the user types in.

Likewise, we may wish to do a mild, imperfect test that the URL is syntatically 
valid (does it have at least one dot in it?  If it has a scheme, does it start 
with http:// or https://)  but we should not IMO automatically be hitting 
whatever URL the reader types in to test to see if the URL works.  This way, if 
the blog commenter decides to type in an Al-Qaeda, porn, or drug trafficking 
website URL the blogger's server will not be on record of having accessed it.  
Also, it's entirely possible the commenter's entered URL may be temporarily 
down or a future URL that the commenter plans to activate next week.


> https:// URLs not being processed correctly in the comment URL field
> --------------------------------------------------------------------
>
>                 Key: ROL-2002
>                 URL: https://issues.apache.org/jira/browse/ROL-2002
>             Project: Apache Roller
>          Issue Type: Bug
>          Components: Comments
>    Affects Versions: 5.1
>            Reporter: Glen Mazza
>            Assignee: Greg Huber
>
> If a commenter has an https:// URL, Roller incorrectly prepends an http:// to 
> it, for example:  http://https://web-gmazza.rhcloud.com/blog



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Reply via email to