Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0048402Retail ModulesWeb POS Hardware Managerpublic2022-01-14 09:152022-03-17 16:46
Reporteradrianromero 
Assigned Toyogaskarnik 
PrioritynormalSeveritymajorReproducibilityhave not tried
StatusscheduledResolutionopen 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customer
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0048402: Private network access preflight CORS header for the Hardware Manager
DescriptionDue to a new Chrome security policy, the hardware manager must add a new header in its CORS preflight responses allowing private network access.
 
New Chrome policy
https://developer.chrome.com/blog/private-network-access-preflight/ [^]

This header is the following:
Access-Control-Allow-Private-Network: true

Note: as a good practice the hardware manager should not allow all origins as valid callers:
Access-Control-Allow-Origin: *
And prevent this configuring it can be invoked only from Openbravo.
Steps To ReproduceN/A
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2022-01-14 09:15adrianromeroNew Issue
2022-01-14 09:15adrianromeroAssigned To => adrianromero
2022-01-14 09:15adrianromeroTriggers an Emergency Pack => No
2022-03-09 09:38adrianromeroAssigned Toadrianromero => yogaskarnik
2022-03-09 09:38adrianromeroStatusnew => acknowledged
2022-03-14 14:05adrianromeroStatusacknowledged => scheduled
2022-03-17 16:46hgbotNote Added: 0135812

Notes
(0135812)
hgbot   
2022-03-17 16:46   
Merge Request created: https://gitlab.com/openbravo/product/pmods/org.openbravo.retail.poshwmanager.sources/-/merge_requests/57 [^]