Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-10733

ResourceServlet should authenticate

    XMLWordPrintable

Details

    • Improvement
    • Status: Closed
    • Normal
    • Resolution: Fixed
    • None
    • utilities-4.0.0
    • None
    • None

    Description

      The ResourceServlet (hippo-cms-utilities) currently doesn't perform authentication. The CMS uses several instances of the ResourceServlet to serve resources from JAR files. By default those include:

      • Angular resources below /angular
      • CKEditor resources below /ckeditor
      • CMS styling below /skin

      Logged-out users should not be able to retrieve these resources through the ResourceServlet.

      Attachments

        Issue Links

          causes

          Bug - A problem which impairs or prevents the functions of the product. FEBUILD-101 Firefox can't retrieve source map as the map is a protected resource and Firefox doesn't authenticate

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed

          New Feature - A new feature of the product, which has yet to be developed. ARCHE-532 Update default web.xml

          • Normal - Normal priority, tasks to be done before next intermediate release
          • Closed
          relates to

          Bug - A problem which impairs or prevents the functions of the product. CMS-13210 Channel toolbar is not displayed if you go first to an SPA channel

          • Blocker - Blocks further development for most developers or blocks intermediate release
          • Closed

          Bug - A problem which impairs or prevents the functions of the product. CMS-13419 Improve SameSite cookies to be compatible with new versions of Chrome

          • Top - Should be worked on at this time and be top on the list, required for next intermediate release
          • Closed

          Activity

            People

              Unassigned Unassigned
              tjeger Tobias Jeger
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: