[tahoe-lafs-trac-stream] [tahoe-lafs] #1436: web interface using wrong address / port number when doing ssh port forwarding

tahoe-lafs trac at tahoe-lafs.org
Tue Jul 19 09:08:05 PDT 2011


#1436: web interface using wrong address / port number when doing ssh port
forwarding
----------------------------+----------------------------------------------
     Reporter:  T_X         |      Owner:
         Type:  defect      |     Status:  new
     Priority:  major       |  Milestone:  1.10.0
    Component:  code-       |    Version:  1.8.2
  frontend-web              |   Keywords:  ssh port forwarding redirect wui
   Resolution:              |
Launchpad Bug:              |
----------------------------+----------------------------------------------
Changes (by davidsarah):

 * keywords:  ssh port forwarding redirect => ssh port forwarding redirect
               wui
 * milestone:  undecided => 1.10.0


Comment:

 It would be fairly easy for the web UI to use relative URLs in the HTML it
 generates. The relevant code seems to be the
 [source:src/allmydata/web/common.py at 4979#L35 get_root function in
 web/common.py]. (It is used by
 [source:src/allmydata/web/directory.py at 4527#549 DirectoryAsHTML in
 web/directory.py], and in operations.py and info.py; all these uses would
 need to be checked.)

 Note that we may in future want to use different ports for generated pages
 and for user files, in order to address WUI same-origin security bugs such
 as #615. That would make using fully relative URLs more difficult, but
 let's cross that bridge when we come to it.

-- 
Ticket URL: <http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1436#comment:2>
tahoe-lafs <http://tahoe-lafs.org>
secure decentralized storage


More information about the tahoe-lafs-trac-stream mailing list