[armedbear] #432: CL:OPEN on URL-PATHNAME does not redirect across different schemes

armedbear armedbear-devel at common-lisp.net
Sun Jun 4 20:44:57 UTC 2017


#432: CL:OPEN on URL-PATHNAME does not redirect across different schemes
------------------------------+--------------------------
      Reporter:  aruttenberg  |      Owner:  mevenson
          Type:  defect       |     Status:  accepted
      Priority:  blocker      |  Milestone:  1.5.0
     Component:  streams      |    Version:  1.5.0-dev
    Resolution:               |   Keywords:  has-test uri
Parent Tickets:               |
------------------------------+--------------------------

Comment (by aruttenberg):

 Not a restart. Restarts should be for exceptional conditions. In this case
 the common use pattern of PURLs is that they redirect. Always. In
 addition, the common case for browsers is that they follow redirects by
 default. ABCL should be no different.

 For my case, restricting http->https would be fine, as would having a
 setting that controls
 https://docs.oracle.com/javase/7/docs/api/java/net/HttpURLConnection.html#instanceFollowRedirects

 Preferred: default to permissive, warning (one time per session) in the
 case of potentially insecure https->http redirect with instruction about
 how to set default to fix.

--
Ticket URL: <http://abcl.org/trac/ticket/432#comment:10>
armedbear <http://abcl.org>
armedbear


More information about the armedbear-ticket mailing list