Forum OpenACS Q&A: Re: Redirction to external hosts is not allowed

Collapse
Posted by Ratnakar Sagare on
Hi Deds,
Tried this but it didn't work as my OpenACS installation listens on 8000 port & my apache server (who serves the static page- index.htm)is listening on 80 port.

So when I put /index.htm only; it gave (servername:8000/index.htm) page not found error.

Thanks,
Ratnakar

Collapse
Posted by Ryan Gallimore on
Would it be safe to trust the IndexRedirectURL parameter URL?

I would grep the code for IndexRedirectURL to find the call to ad_returnredirect and then add the switch -allow_complete_url.

My opinion is that we can always trust the configured value, so a redirect to another port is possible.

Collapse
Posted by Dave Bauer on
Ryan, that is reasonable, but, that should probably be a relative URL anyway.