Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0035549
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Retail Modules] StoreServerminorhave not tried2017-03-17 08:462017-03-20 10:41
ReportermtaalView Statuspublic 
Assigned Tomtaal 
PrioritynormalResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revision98a5ddef7677
ProjectionnoneETAnoneTarget VersionRR17Q2
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Status
Review Assigned ToAugustoMauch
OBNetwork customerOBPS
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0035549: Cross domain checking should not use mobile servers if the multi-server preference is of

DescriptionThe cross domain checking logic uses mobile server definitions [1]. It should however not use them if the multi-server preference [2] is not set.

[1]
http://wiki.openbravo.com/wiki/How_to_Setup_MultiServer_Dev_Environment#Understanding_CORS [^]

[2]
http://wiki.openbravo.com/wiki/Store_and_Multi_Server_Preferences [^]
Steps To ReproduceCreate some mobile server definitions with urls
Set the multi-server preference to N
Set a breakpoint in the code here [1]
See that the code reads the mobile server definitions and uses them

[1]
https://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/file/01f7665c6772/src/org/openbravo/mobile/core/authenticate/MobileAllowedCrossDomainsChecker.java#l82 [^]
Proposed SolutionDo not read any mobile server definition records if multi-server preference is N
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
related to defect 00355483.0PR17Q2 closedmtaal Openbravo ERP Cross domain checks is also executed/logged when the origin of the webpos main page and the separate xhr request are the same 

-  Notes
(0095397)
hgbot (developer)
2017-03-19 10:41

 Repository: erp/pmods/org.openbravo.mobile.core
Changeset: 98a5ddef767777bd4faebb244e9bb2b5b27299e6
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Sun Mar 19 10:30:02 2017 +0100
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/98a5ddef767777bd4faebb244e9bb2b5b27299e6 [^]

Fixes issue 35549: Cross domain checking should not use mobile servers if the multi-server preference is off
Keep the internal list empty if the multi-server pref is off

---
M src/org/openbravo/mobile/core/authenticate/MobileAllowedCrossDomainsChecker.java
---
(0095415)
AugustoMauch (administrator)
2017-03-20 10:41

 Code reviewed and verified

- Issue History
Date Modified Username Field Change
2017-03-17 08:46 mtaal New Issue
2017-03-17 08:46 mtaal Assigned To => mtaal
2017-03-17 08:46 mtaal OBNetwork customer => No
2017-03-17 08:46 mtaal Triggers an Emergency Pack => No
2017-03-17 08:46 mtaal Relationship added related to 0035548
2017-03-17 10:10 shuehner OBNetwork customer No => Yes
2017-03-17 10:10 shuehner Resolution time => 1491516000
2017-03-17 10:14 shuehner Issue Monitored: shuehner
2017-03-19 10:29 mtaal Review Assigned To => AugustoMauch
2017-03-19 10:41 hgbot Checkin
2017-03-19 10:41 hgbot Note Added: 0095397
2017-03-19 10:41 hgbot Status new => resolved
2017-03-19 10:41 hgbot Resolution open => fixed
2017-03-19 10:41 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/98a5ddef767777bd4faebb244e9bb2b5b27299e6 [^]
2017-03-20 10:41 AugustoMauch Note Added: 0095415
2017-03-20 10:41 AugustoMauch Status resolved => closed

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker