[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236737#comment-17236737 ] Jacques Le Roux commented on OFBIZ-11588: - As I asked in my 1st comment: bq. Should we not care

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-21 Thread Daniel Watford (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236688#comment-17236688 ] Daniel Watford commented on OFBIZ-11588: Hi [~jleroux] We would want to apply this PR since it

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-21 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236613#comment-17236613 ] Jacques Le Roux commented on OFBIZ-11588: - Hi Daniel, I understood your question, there are no

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-20 Thread Daniel Watford (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236290#comment-17236290 ] Daniel Watford commented on OFBIZ-11588: Hi [~jleroux]. If we merge the PR as currently

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-20 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236117#comment-17236117 ] Jacques Le Roux commented on OFBIZ-11588: - Why would we want that? > Have

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-20 Thread Daniel Watford (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236062#comment-17236062 ] Daniel Watford commented on OFBIZ-11588: Hi [~jleroux] If this PR is merged then

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-20 Thread Jacques Le Roux (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236013#comment-17236013 ] Jacques Le Roux commented on OFBIZ-11588: - Hi Daniel, In security.properties? we have:

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-20 Thread Daniel Watford (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236003#comment-17236003 ] Daniel Watford commented on OFBIZ-11588: [~jleroux] - when ofbiz is deployed to the demo hosts,

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-11-20 Thread Daniel Watford (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17236002#comment-17236002 ] Daniel Watford commented on OFBIZ-11588: [~pierresmits] - As I understand it, 0.0.0.0 is a

[jira] [Commented] (OFBIZ-11588) Have 'host-headers-allowed' validation for all local headers

2020-04-07 Thread Pierre Smits (Jira)
[ https://issues.apache.org/jira/browse/OFBIZ-11588?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17077281#comment-17077281 ] Pierre Smits commented on OFBIZ-11588: -- I am confused. What is your point? Or is it a rhetorical