Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0053672
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] C. Securitymajorhave not tried2023-10-17 10:102025-03-27 12:02
ReporterebecerraView Statuspublic 
Assigned ToTriage Platform Base 
PrioritynormalResolutionduplicateFixed in Version
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Status
Review Assigned To
OBNetwork customerNo
Web browser
ModulesCore
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0053672: HTTP PUT and HTTP DELETE should accept CORS

DescriptionNowadays the HTTP methods allowed for cross-domain calls are POST, GET and OPTIONS.
While developing 53527 we realized that we need to allow request using CORS for PUT and DELETE
Steps To ReproduceCRM connector (without coding) launches requests against an external system that can be configured in a different domain.

The CRM that we prepared for testing is running on OB but when we try to use it from a development environment (POS executed in npm server) requests to the back office (CRM example for testing purposes) are in another domain so these operations (PUT, DELETE) does not work
Proposed SolutionSee attachment image
TagsNo tags attached.
Attached Filespng file icon Cors.png [^] (62,169 bytes) 2023-10-17 10:10

- Relationships [ Relation Graph ] [ Dependency Graph ]

-  Notes
(0177387)
hgbot (developer)
2025-03-27 12:02

 Issue exported to Jira: https://openbravo.atlassian.net/browse/RM-24119 [^]

- Issue History
Date Modified Username Field Change
2023-10-17 10:10 ebecerra New Issue
2023-10-17 10:10 ebecerra Assigned To => Triage Platform Base
2023-10-17 10:10 ebecerra File Added: Cors.png
2023-10-17 10:10 ebecerra OBNetwork customer => No
2023-10-17 10:10 ebecerra Modules => Core
2023-10-17 10:10 ebecerra Triggers an Emergency Pack => No
2023-10-25 15:27 guilleaer Summary Must be included the HTTP methods: PUT and DELETE for CORS validations => HTTP PUT and HTTP DELETE should accept CORS
2023-10-25 15:27 guilleaer Description Updated View Revisions
2023-10-25 15:27 guilleaer Steps to Reproduce Updated View Revisions
2023-10-25 15:30 guilleaer Description Updated View Revisions
2023-10-25 15:30 guilleaer Steps to Reproduce Updated View Revisions
2025-03-27 12:02 hgbot Note Added: 0177387
2025-03-27 12:02 hgbot Status new => closed
2025-03-27 12:02 hgbot Resolution open => duplicate

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker