[ 
https://issues.apache.org/jira/browse/TS-4133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15098681#comment-15098681
 ] 

ASF GitHub Bot commented on TS-4133:
------------------------------------

GitHub user jrushf1239k opened a pull request:

    https://github.com/apache/trafficserver/pull/424

    TS-4133: Update the url_sig plugin so that application query paramete…

    See TS-4133.  This update to url_sig will allow application query 
parameters destined for an origin server to remain intact rather than stripping 
all query parameters after request signing validation.

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/jrushf1239k/trafficserver ts4133

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/trafficserver/pull/424.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #424
    
----
commit 9ff81dba555fd2b23e1741cf89a8a08621919fc4
Author: John J. Rushford <[email protected]>
Date:   2016-01-14T19:22:35Z

    TS-4133: Update the url_sig plugin so that application query parameters are 
left intact on the request.

----


> Update url_sig plugin to pass application query parameters
> ----------------------------------------------------------
>
>                 Key: TS-4133
>                 URL: https://issues.apache.org/jira/browse/TS-4133
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: Plugins
>            Reporter: John Rushford
>            Assignee: John Rushford
>
> Currently the url_sig plugin assumes that request urls have no other query 
> parameters but url signing related parameters.  After signing validation is 
> performed using the signing parameters all query parameters are stripped from 
> the request.
> This change will allow application query parameters that must be sent to the 
> origin to fulfill a request to be left intact in the request.  When signing a 
> request with application query parameters it is required that the url signing 
> parameters used by this plugin must come after the application parameters.  
> When the request comes in the plugin will truncate the url signing parameters 
> after verification leaving the application parameters intact.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to