Forum OpenACS Q&A: Re: Redirction to external hosts is not allowed

Collapse
4: Re: Redirction to external hosts is not allowed (response to 1)
Posted by Deds Castillo on 11/13/09 07:03 AM
Just use /index.htm (without the host part) in the parameter setting
Collapse
5: Re: Redirction to external hosts is not allowed (response to 4)
Posted by Ratnakar Sagare on 11/13/09 07:38 AM
Hi Deds,
Tried this but it didn't work as my OpenACS installation listens on 8000 port & my apache server (who serves the static page- index.htm)is listening on 80 port.

So when I put /index.htm only; it gave (servername:8000/index.htm) page not found error.

Thanks,
Ratnakar

Collapse
6: Re: Redirction to external hosts is not allowed (response to 5)
Posted by Ryan Gallimore on 11/15/09 10:53 PM
Would it be safe to trust the IndexRedirectURL parameter URL?

I would grep the code for IndexRedirectURL to find the call to ad_returnredirect and then add the switch -allow_complete_url.

My opinion is that we can always trust the configured value, so a redirect to another port is possible.

Collapse
7: Re: Redirction to external hosts is not allowed (response to 6)
Posted by Dave Bauer on 11/15/09 11:00 PM
Ryan, that is reasonable, but, that should probably be a relative URL anyway.