[tahoe-lafs-trac-stream] [tahoe-lafs] #1798: Segregate gateway HTTP ports: one for raw bytes and one for generated WUI pages

[tahoe-lafs]

#1798: Segregate gateway HTTP ports: one for raw bytes and one for generated WUI
pages
--------------------------------------+-----------------------
 Reporter:  davidsarah                |          Owner:
     Type:  defect                    |         Status:  new
 Priority:  major                     |      Milestone:  soon
Component:  code-frontend-web         |        Version:  1.9.2
 Keywords:  wui same-origin security  |  Launchpad Bug:
--------------------------------------+-----------------------
 This is a complementary approach to #1797 and #827 for solving the same-
 origin security problems described in #615.

 Note that it has no security benefit on Internet Explorer because IE
 treats all ports on a host as being in the same origin. It does have
 benefit on other browsers.

-- 
Ticket URL: <https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1798>
tahoe-lafs <https://tahoe-lafs.org>
secure decentralized storage