Uploaded image for project: 'OFBiz'
  1. OFBiz
  2. OFBIZ-1525 Issue to group security concerns
  3. OFBIZ-11643

CLONE - Use only HTTPS in OFBiz

Attach filesAttach ScreenshotVotersWatch issueWatchersLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

Details

    • Sub-task
    • Status: Closed
    • Major
    • Resolution: Won't Do
    • Trunk
    • None
    • ALL COMPONENTS
    • None
    • Bug Crush Event - 21/2/2015

    Description

      When doing OFBIZ-6849 I forgot to take care of the https attribute of the security element used in controllers.

      It's not used anymore since we used HTTPS everywhere but in request listed in http.request-map.list property of url.properties. It's even enforced by HSTS for requests that are not listed in this property.

      So I'll remove the https attribute and remove its usage in in controllers.

      This is part of handling a security issue, so will be backported in supported branches when needed.

      Attachments

        Issue Links

        is a clone of

        Sub-task - The sub-task of the issue OFBIZ-6849 Use only HTTPS in OFBiz

        • Major - Major loss of function.
        • Closed

        Activity
          This comment will be Viewable by All Users Viewable by All Users
          Cancel

          People

            jleroux Jacques Le Roux
            jleroux Jacques Le Roux
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Agile

                Completed Sprint:
                Bug Crush Event - 21/2/2015 ended 26/Feb/15
                View on Board

                Slack

                  Issue deployment