[armedbear] #432: CL:OPEN on URL-PATHNAME does not redirect across different schemes
armedbear
armedbear-devel at common-lisp.net
Sun Jun 4 20:44:57 UTC 2017
#432: CL:OPEN on URL-PATHNAME does not redirect across different schemes
------------------------------+--------------------------
Reporter: aruttenberg | Owner: mevenson
Type: defect | Status: accepted
Priority: blocker | Milestone: 1.5.0
Component: streams | Version: 1.5.0-dev
Resolution: | Keywords: has-test uri
Parent Tickets: |
------------------------------+--------------------------
Comment (by aruttenberg):
Not a restart. Restarts should be for exceptional conditions. In this case
the common use pattern of PURLs is that they redirect. Always. In
addition, the common case for browsers is that they follow redirects by
default. ABCL should be no different.
For my case, restricting http->https would be fine, as would having a
setting that controls
https://docs.oracle.com/javase/7/docs/api/java/net/HttpURLConnection.html#instanceFollowRedirects
Preferred: default to permissive, warning (one time per session) in the
case of potentially insecure https->http redirect with instruction about
how to set default to fix.
--
Ticket URL: <http://abcl.org/trac/ticket/432#comment:10>
armedbear <http://abcl.org>
armedbear
More information about the armedbear-ticket
mailing list