As described on the blog announcement (
https://geoserver.org/announcements/2023/07/21/geoserver-2-23-2-released.html)
this release includes a URL Checking function to prevent OGC processes from
calling arbitrary URLs as a security enhancement.

You will need to white list the `*https://**********/ImageHandler.ashx` *url
(but be careful escaping those *)

Ian

On Fri, 1 Sept 2023 at 10:32, Karsten Darré via Geoserver-users <
geoserver-users@lists.sourceforge.net> wrote:

> Hello
>
> After upgrading to Geoserver 2.23.2 (from version 2.22.3) some of your
> dynamic image url’s (In SLD’s) stopped working, and we are getting som
> errors:
>
> *URI.normalize() not available for location: <URL>*
>
> *Path.normalize() not available for location: <URL>*
>
> *Error occurred evaluating external graphic
> org.geotools.data.ows.URLCheckerException: Unable to normalize location:
> <URL>*
>
>
>
> The url is as follows:
>
>
> *https://**********/ImageHandler.ashx?parameters=&imageurl=https://**********/Images/NorthArrows/northmicro.png&wkt=POLYGON|((588873.93564633|6137127.0831221,|588873.93564633|6137249.5831221,|588996.43564633|6137249.5831221,|588996.43564633|6137127.0831221,|588873.93564633|6137127.0831221))&plotscale=3500&wms_scale_denominator=3306.045340050377&wms_height=1123&wms_width=794&wms_bbox=588313.93564633|589048.93564633,6136262.5831221|6137302.0831221*
>
>
>
> The url works as expected from the service we are calling and it is
> returning the correct image, and have been working perfectly on older
> versions of geoserver.
>
> Do any of you have an idea of what has changed in 2.23.2?
>
>
>
>
>
> Med venlig hilsen / Best regards
>
>
>
> *Karsten Darré*
>
> GIS-udvikler
>
>
> _______________________________________________
> Geoserver-users mailing list
>
> Please make sure you read the following two resources before posting to
> this list:
> - Earning your support instead of buying it, but Ian Turton:
> http://www.ianturton.com/talks/foss4g.html#/
> - The GeoServer user list posting guidelines:
> http://geoserver.org/comm/userlist-guidelines.html
>
> If you want to request a feature or an improvement, also see this:
> https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer
>
>
> Geoserver-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/geoserver-users
>


-- 
Ian Turton
_______________________________________________
Geoserver-users mailing list

Please make sure you read the following two resources before posting to this 
list:
- Earning your support instead of buying it, but Ian Turton: 
http://www.ianturton.com/talks/foss4g.html#/
- The GeoServer user list posting guidelines: 
http://geoserver.org/comm/userlist-guidelines.html

If you want to request a feature or an improvement, also see this: 
https://github.com/geoserver/geoserver/wiki/Successfully-requesting-and-integrating-new-features-and-improvements-in-GeoServer


Geoserver-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-users

Reply via email to