Issue #702 resolved

HTTPRedirect absolute URLs break proxied CP

created an issue

Even when a relative URL is provided, HTTPRedirect builds absolute URLs using request.path_info. If the user has proxied their CP application, this fully-qualified URL will be passed directly back to the browser and will likely be inaccessible to the end-user.

Seen in CP 3.0.1, not a problem in 2.2.1.

{{{ server.socket_host = server.socket_port = 8080

def redirect(url): e = cherrypy.HTTPRedirect(url) print e.urls[0] # e.urls[0] = url raise e }}}

Comments (3)

  1. Log in to comment