Openbravo Issue Tracking System - Openbravo ERP | |||||
| View Issue Details | |||||
| ID | Project | Category | View Status | Date Submitted | Last Update |
| 0024795 | Openbravo ERP | A. Platform | public | 2013-09-19 13:13 | 2022-02-01 08:05 |
| Reporter | adrianromero | ||||
| Assigned To | Triage Platform Base | ||||
| Priority | normal | Severity | minor | Reproducibility | have not tried |
| Status | acknowledged | Resolution | open | ||
| Platform | OS | 5 | OS Version | ||
| Product Version | |||||
| Target Version | Fixed in Version | ||||
| Merge Request Status | |||||
| Review Assigned To | |||||
| OBNetwork customer | |||||
| Web browser | |||||
| Modules | Core | ||||
| Support ticket | |||||
| Regression level | |||||
| Regression date | |||||
| Regression introduced in release | |||||
| Regression introduced by commit | |||||
| Triggers an Emergency Pack | No | ||||
| Summary | 0024795: If Openbravo is behind a proxy server that uses https. Login page is forwarded with protocol http. | ||||
| Description | In the case there is a proxy server that exposes the Openbravo application using the https protocol, but request to Openbravo from the proxy uses http, then during the login process Openbravo sends a redirection to the menu with the protocol http and sending the username and password clear through the net. This is because when redirecting to menu, Openbravo builds an absolute URL using the request that is http not https | ||||
| Steps To Reproduce | In description | ||||
| Proposed Solution | Instead of building an absolute URL, build a relative URL in redirections. Attached a fix for the case of the redirection in the login process only. | ||||
| Additional Information | |||||
| Tags | No tags attached. | ||||
| Relationships | |||||
| Attached Files |  Fix-24795.patch (4,723) 2013-09-19 13:14https://issues.openbravo.com/file_download.php?file_id=6418&type=bug | ||||
| Issue History | |||||
| Date Modified | Username | Field | Change | ||
| 2013-09-19 13:13 | adrianromero | New Issue | |||
| 2013-09-19 13:13 | adrianromero | Assigned To | => AugustoMauch | ||
| 2013-09-19 13:13 | adrianromero | Modules | => Core | ||
| 2013-09-19 13:13 | adrianromero | Triggers an Emergency Pack | => No | ||
| 2013-09-19 13:14 | adrianromero | File Added: Fix-24795.patch | |||
| 2013-09-19 13:30 | shuehner | Issue Monitored: shuehner | |||
| 2015-03-17 14:37 | alostale | Assigned To | AugustoMauch => platform | ||
| 2015-11-11 11:30 | alostale | Priority | urgent => normal | ||
| 2015-11-11 11:30 | alostale | Severity | major => minor | ||
| 2015-11-11 11:30 | alostale | Status | new => acknowledged | ||
| 2015-11-11 13:14 | shuehner | Note Added: 0081704 | |||
| 2022-02-01 08:05 | alostale | Assigned To | platform => Triage Platform Base | ||
| Notes | |||||
|
|
|||||
|
|
||||