[
https://issues.apache.org/jira/browse/COUCHDB-759?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12986533#action_12986533
]
Benoit Chesneau commented on COUCHDB-759:
-----------------------------------------
The current jail code only check relative path on target. So if secure rewrite
is enable I propose rather to test jail against rewritten path. I will provide
a patch later today.
> rewriter should be securely jailed in a single database by default
> ------------------------------------------------------------------
>
> Key: COUCHDB-759
> URL: https://issues.apache.org/jira/browse/COUCHDB-759
> Project: CouchDB
> Issue Type: Bug
> Reporter: Chris Anderson
>
> This will allow us to isolate databases using vhosts and the browser's
> single-origin policy.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
