This is an automated email from the ASF dual-hosted git repository.
sergehuber pushed a change to branch UNOMI-1005-tracker-cookie-origins
in repository https://gitbox.apache.org/repos/asf/unomi.git
from ac3a686f3 UNOMI-1005: Keep same-origin visitors and make the origin
check effective
add 357c291e6 UNOMI-1005: Refuse embedded cross-site requests and keep
refused cookies
No new revisions were added by this update.
Summary of changes:
.../apache/unomi/itests/PublicTrackerCorsIT.java | 39 ++++++++++++--
manual/src/main/asciidoc/configuration.adoc | 2 +-
.../unomi/rest/cors/PublicTrackerCorsFilter.java | 4 +-
.../unomi/rest/cors/PublicTrackerCorsPolicy.java | 34 +++++++-----
...orsSettings.java => PublicTrackerSettings.java} | 63 ++++++++--------------
.../org/apache/unomi/rest/server/RestServer.java | 12 ++---
.../rest/service/impl/RestServiceUtilsImpl.java | 57 +++++++++++++-------
.../java/org/apache/unomi/utils/HttpUtils.java | 16 ------
.../rest/cors/PublicTrackerCorsFilterTest.java | 2 +-
.../rest/cors/PublicTrackerCorsPolicyTest.java | 6 +++
...ngsTest.java => PublicTrackerSettingsTest.java} | 57 +++++++++++++-------
.../RestServiceUtilsImplProfileBindingTest.java | 42 ++++++++++++++-
.../unomi/utils/ProfileCookieSameSiteTest.java | 30 ++++++-----
.../org/apache/unomi/web/servlets/WebConfig.java | 4 +-
14 files changed, 234 insertions(+), 134 deletions(-)
rename
rest/src/main/java/org/apache/unomi/rest/cors/{PublicTrackerCorsSettings.java
=> PublicTrackerSettings.java} (78%)
rename
rest/src/test/java/org/apache/unomi/rest/cors/{PublicTrackerCorsSettingsTest.java
=> PublicTrackerSettingsTest.java} (66%)
