Forum OpenACS Q&A: Re: Redirction to external hosts is not allowed

Collapse
Posted by Deds Castillo on
Just use /index.htm (without the host part) in the parameter setting
Collapse
Posted by Ratnakar Sagare on
Hi Deds,
Tried this but it didn't work as my OpenACS installation listens on 8000 port & my apache server (who serves the static page- index.htm)is listening on 80 port.

So when I put /index.htm only; it gave (servername:8000/index.htm) page not found error.

Thanks,
Ratnakar

Collapse
Posted by Ryan Gallimore on
Would it be safe to trust the IndexRedirectURL parameter URL?

I would grep the code for IndexRedirectURL to find the call to ad_returnredirect and then add the switch -allow_complete_url.

My opinion is that we can always trust the configured value, so a redirect to another port is possible.

Collapse
Posted by Dave Bauer on
Ryan, that is reasonable, but, that should probably be a relative URL anyway.