[ 
https://issues.apache.org/jira/browse/TS-4133?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15206769#comment-15206769
 ] 

ASF subversion and git services commented on TS-4133:
-----------------------------------------------------

Commit dcb2ede1ae09dd7348e375f2730cc58b77312bd7 in trafficserver's branch 
refs/heads/master from John J. Rushford
[ https://git-wip-us.apache.org/repos/asf?p=trafficserver.git;h=dcb2ede ]

TS-4133: Update the url_sig plugin so that application query parameters are 
left intact on the request.

Signed-off-by: John J. Rushford <[email protected]>


> Update url_sig plugin to pass application query parameters
> ----------------------------------------------------------
>
>                 Key: TS-4133
>                 URL: https://issues.apache.org/jira/browse/TS-4133
>             Project: Traffic Server
>          Issue Type: Improvement
>          Components: Plugins
>            Reporter: John Rushford
>            Assignee: John Rushford
>             Fix For: 6.2.0
>
>
> Currently the url_sig plugin assumes that request urls have no other query 
> parameters but url signing related parameters.  After signing validation is 
> performed using the signing parameters all query parameters are stripped from 
> the request.
> This change will allow application query parameters that must be sent to the 
> origin to fulfill a request to be left intact in the request.  When signing a 
> request with application query parameters it is required that the url signing 
> parameters used by this plugin must come after the application parameters.  
> When the request comes in the plugin will truncate the url signing parameters 
> after verification leaving the application parameters intact.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to