[
https://issues.apache.org/jira/browse/LUCENE-9321?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17098273#comment-17098273
]
Tomoko Uchida commented on LUCENE-9321:
---------------------------------------
{quote}I don't like it to publish HTML pages on lucene.apache.org with absolute
links to lucene.apache.org. We recently changed to HTTPS, so for similar cases
all links in historic Javadocs would need to be rewritten. Thanks to redirects
it still works, but there can be man-in-the-middle problems.
{quote}
I could miss some point, but as for redirecting "renderJavadoc" task emits
"https:" link so there should be no http access, and hence no http => https
redirecting; though I have no idea there are other reasons to prefer relative
paths over absolute urls from security perspective (attackers can take
advantage valunabilities of ssl/tsl when we use absolute urls instead of
relative paths?).
[https://github.com/apache/lucene-solr/blob/master/gradle/render-javadoc.gradle#L64]
(I have confirmed it generates "https://~~"; links.)
> Port documentation task to gradle
> ---------------------------------
>
> Key: LUCENE-9321
> URL: https://issues.apache.org/jira/browse/LUCENE-9321
> Project: Lucene - Core
> Issue Type: Sub-task
> Components: general/build
> Reporter: Tomoko Uchida
> Assignee: Tomoko Uchida
> Priority: Major
> Attachments: screenshot-1.png
>
> Time Spent: 2.5h
> Remaining Estimate: 0h
>
> This is a placeholder issue for porting ant "documentation" task to gradle.
> The generated documents should be able to be published on lucene.apache.org
> web site on "as-is" basis.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org
For additional commands, e-mail: issues-h...@lucene.apache.org
