Uploaded image for project: 'Undertow'
  1. Undertow
  2. UNDERTOW-388

Websocket client set an invalid Origin header value

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 1.1.3.Final, 1.2.0.Beta9
    • None
    • None
    • None

    Description

      Undertow Websocket client currently set the handshake request Origin header value with just the host, without the scheme (cf. WebSocketClient.java#L86).

      Based on RFC 6454, the scheme is mandatory, so instead of setting an Origin header value like domain.com, the Websocket client should set http://domain.com.

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. UNDERTOW-856 Websocket client sends invalid Origin header for non default ports

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              sdouglas1@redhat.com Stuart Douglas
              sebastien.deleuze Sébastien Deleuze (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: