Hm... since localhost is usually only an alias for 127.0.0.1 it doesn't
really make sense to allow one but not the other.

2015-09-25 23:18 GMT+02:00 Adrian Crum <adrian.c...@sandglass-software.com>:

> I was just looking at the UrlValidator test and I noticed that localhost
> is allowed in the URL if the ALLOW_LOCAL_URLS flag is set, and it is not
> allowed if the ALLOW_LOCAL_URLS flag is not set.
>
> If the ALLOW_LOCAL_URLS is not set, a loopback IP address (127.0.0.1) URL
> will validate. It seems to me that it shouldn't - to be consistent with the
> localhost behavior.
>
> What do you think?
>
> --
> Adrian Crum
> Sandglass Software
> www.sandglass-software.com
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: dev-unsubscr...@commons.apache.org
> For additional commands, e-mail: dev-h...@commons.apache.org
>
>


-- 
http://people.apache.org/~britter/
http://www.systemoutprintln.de/
http://twitter.com/BenediktRitter
http://github.com/britter

Reply via email to