New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Test for Insecure Direct Object Reference fails if users creates absolute urls #8

Open

anderius opened this issue May 19, 2015 · 1 comment

Assignees

Contributor

anderius commented May 19, 2015

The following code fails if the user has used absolute urls in the jsp-files:

    tester.gotoPage(site.getAddress() + editHref);
    tester.gotoPage(site.getAddress() + "/blog");

The text was updated successfully, but these errors were encountered:

Contributor

espenaf commented Jul 19, 2015

Hmm. Can`t reproduce. Which jsp files with absolute urls are we talking about?

anderius self-assigned this

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment