Details
-
Bug
-
Status: Resolved
-
Minor
-
Resolution: Fixed
-
None
-
None
-
None
Description
The following test cases fail:
V2URLTests_BaseURL_ApiRenderActurl_setSecure2
V2URLTests_BaseURL_ApiRenderRenurl_setSecure2
V2URLTests_BaseURL_ApiRenderResurl_setSecure2
The API documentation states that a PortletSecurityException will be thrown if the run-time environment does not support the indicated setting. The JSR 286 specification states that when BaseURL#setSecure(true) is executed, the communication resulting from use of the URL must be through a secure channel.
However, setting the secure bit to "true" does not result in an exception, and the resulting communication is not carried out through a secure channel. This is incorrect - either an exception should be thrown, or communication should be secure.