Markus Rathgeb created ARIES-1974: ------------------------------------- Summary: loopback addresses should not be replaced Key: ARIES-1974 URL: https://issues.apache.org/jira/browse/ARIES-1974 Project: Aries Issue Type: Bug Components: jax-rs-whiteboard Affects Versions: jax-rs-whiteboard-1.0.5 Reporter: Markus Rathgeb
The CXF code that is used by the implementation replaces the address "127.0.0.1" by localhost for the UriBuilder. This can be disabled or enabled by an option but it defaults to true. If the host is replaced and you build a "location created" reply using the URI builder the host used by the request and response can differ. If the client that sends the request uses the response location to access a resource browser will block that request because of CORS. For further details and examples please have a look at: https://issues.apache.org/jira/browse/CXF-8190 It would be great if the Aries JAX-RS Whiteboard implementation could set this option to false to allow expected URI builder usage: {{replace.loopback.address.with.localhost=false}} -- This message was sent by Atlassian Jira (v8.3.4#803005)