[
https://issues.apache.org/jira/browse/ARIES-1974?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Carlos Sierra Andrés updated ARIES-1974:
----------------------------------------
Fix Version/s: jax-rs-whiteboard-1.0.9
> loopback addresses should not be replaced
> -----------------------------------------
>
> Key: ARIES-1974
> URL: https://issues.apache.org/jira/browse/ARIES-1974
> Project: Aries
> Issue Type: Bug
> Components: jax-rs-whiteboard
> Affects Versions: jax-rs-whiteboard-1.0.5
> Reporter: Markus Rathgeb
> Priority: Major
> Fix For: jax-rs-whiteboard-1.0.9
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> The CXF code that is used by the implementation replaces the address
> "127.0.0.1" by localhost for the UriBuilder.
> This can be disabled or enabled by an option but it defaults to true.
> If the host is replaced and you build a "location created" reply using the
> URI builder the host used by the request and response can differ.
> If the client that sends the request uses the response location to access a
> resource browser will block that request because of CORS.
> For further details and examples please have a look at:
> https://issues.apache.org/jira/browse/CXF-8190
> It would be great if the Aries JAX-RS Whiteboard implementation could set
> this option to false to allow expected URI builder usage:
> {{replace.loopback.address.with.localhost=false}}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
