Anonymous | Login
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Retail Modules] Web POSminorhave not tried2023-07-26 13:102023-07-26 16:49
ReportercaristuView Statuspublic 
Assigned ToRetail 
PriorityhighResolutionopenFixed in Version
StatusnewFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned To
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo

0053065: Scope of the service worker must be restricted

DescriptionThe scope defined for the service worker in enyo pos is '/'[1]. This means that
the service worker has control over the entire origin (i.e., all pages and assets within the same domain as the service worker). This is not correct as we only have to control the resources that affect to the specific application (enyopos, awo etc.)

[1] [^]
Steps To ReproduceOne of the possible ways of checking that the scope is requesting more than it should:

0) Revert the change introduced here[1], which is a workaround to avoid this problem happen
1) In a new browser tab, open main Openbravo login page
2) In a second browser tab, open the enyopos login page
3) Clear the browsers cache, and refresh the enyopos login page, note that the service worker is not only requesting resources for the enyopos, but also it is requesting the login page of the backend (Security/Login URL).

[1] [^]
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]
related to defect 0052839 closedcaristu Openbravo ERP Extensible authentication provider infrastructure 

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2023-07-26 13:10 caristu New Issue
2023-07-26 13:10 caristu Assigned To => Retail
2023-07-26 13:10 caristu Triggers an Emergency Pack => No
2023-07-26 14:31 caristu Relationship added related to 0052839
2023-07-26 16:48 caristu Steps to Reproduce Updated View Revisions
2023-07-26 16:49 caristu Steps to Reproduce Updated View Revisions

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker