View Issue Details

IDProjectCategoryView StatusLast Update
0002501GNUnetGNSpublic2012-11-05 17:34
Reporterschanzen Assigned Toschanzen Due Date
PrioritynormalSeverityfeatureReproducibilityhave not tried
Status closedResolutionfixed 
Product Version0.9.4 
Target Version0.9.4Fixed in Version0.9.4 
Summary0002501: GNS proxy same origin policy and CORS
DescriptionAtm the proxy tries to rewrite all links using the LEHO in the HTML to the GNS name so that js et al are not blocked by the browsers SOP. Of course for example url's generated by js or something alike can't be rewritten like that.
Maybe CORS is a saner approach to this issue: http://en.wikipedia.org/wiki/Cross-origin_resource_sharing

For example: Maybe it makes sense to add the domain=<LEHO> part given from the webserver as CORS header to the browser AND replacing it with the GNS name in the cookie.
Another less GNSssy way is probably to ONLY add the GNS name to the CORS header and leaving the cookie domain intact/send a second cookie with the GNS name.
TagsNo tags attached.

Activities

schanzen

2012-08-03 20:52

administrator   ~0006270

Proxy now always adds LEHO as CORS domain, if present.

Issue History

Date ModifiedUsernameFieldChange
2012-07-17 20:04schanzenNew Issue
2012-07-17 20:04schanzenStatusnew => assigned
2012-07-17 20:04schanzenAssigned To => schanzen
2012-08-03 20:52schanzenNote Added: 0006270
2012-08-03 20:52schanzenStatusassigned => resolved
2012-08-03 20:52schanzenResolutionopen => fixed
2012-08-03 20:52schanzenProduct Version => 0.9.4
2012-08-03 20:52schanzenFixed in Version => 0.9.4
2012-08-03 20:52schanzenTarget Version => 0.9.4
2012-11-05 17:34Christian GrothoffStatusresolved => closed