Message Title

Vasyl Kaigorodov created an issue

AGPUSH-1081

Issue Type:	Bug
Affects Versions:	1.0.0-Beta1
Assignee:	Unassigned
Components:	UnifiedPush-node-sender
Created:	23/Oct/14 11:36 AM
Environment:	jboss-unified-push-1.0.0.Beta1-server jboss-eap-6.3 UnifiedPush deployed as a .war file in EAP-standalone mode.
Priority:	Major
Reporter:	Vasyl Kaigorodov

If an authorized malicious user put some abitrary text as X-Forwarded-For, Proxy-Client-IP or WL-Proxy-Client-IP header value, this value will be recorded to the database, and will be shown as the ipAddress in the Application Notifications list.

Add Comment

This message was sent by Atlassian JIRA