[ https://issues.apache.org/jira/browse/ARIES-1974?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17084975#comment-17084975 ]
Markus Rathgeb edited comment on ARIES-1974 at 4/16/20, 3:17 PM: ----------------------------------------------------------------- Why is fixed version set to 1.0.8? Hasn't 1.0.8 been released a month ago? was (Author: maggu2810): is fixed version set to 1.0.8? Hasn't 1.0.8 been released a month ago? > loopback addresses should not be replaced > ----------------------------------------- > > Key: ARIES-1974 > URL: https://issues.apache.org/jira/browse/ARIES-1974 > Project: Aries > Issue Type: Bug > Components: jax-rs-whiteboard > Affects Versions: jax-rs-whiteboard-1.0.5 > Reporter: Markus Rathgeb > Priority: Major > Fix For: jax-rs-whiteboard-1.0.8 > > Time Spent: 20m > Remaining Estimate: 0h > > The CXF code that is used by the implementation replaces the address > "127.0.0.1" by localhost for the UriBuilder. > This can be disabled or enabled by an option but it defaults to true. > If the host is replaced and you build a "location created" reply using the > URI builder the host used by the request and response can differ. > If the client that sends the request uses the response location to access a > resource browser will block that request because of CORS. > For further details and examples please have a look at: > https://issues.apache.org/jira/browse/CXF-8190 > It would be great if the Aries JAX-RS Whiteboard implementation could set > this option to false to allow expected URI builder usage: > {{replace.loopback.address.with.localhost=false}} -- This message was sent by Atlassian Jira (v8.3.4#803005)