[jboss-jira] [JBoss JIRA] Resolved: (SECURITY-138) Check requirements of POST requests

Darran Lofthouse (JIRA) jira-events at lists.jboss.org
Thu Jan 29 12:56:44 EST 2009


     [ https://jira.jboss.org/jira/browse/SECURITY-138?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Darran Lofthouse resolved SECURITY-138.
---------------------------------------

    Fix Version/s:     (was: Negotiation_2.0.3.GA)
       Resolution: Done


This is not an issue as the web browser will re-submit the form data in the final request.

However for large file uploads the same file may be uploaded multiple times, this means that switching to a secure page should be uploaded as part of a POST request unless the request is small.

> Check requirements of POST requests
> -----------------------------------
>
>                 Key: SECURITY-138
>                 URL: https://jira.jboss.org/jira/browse/SECURITY-138
>             Project: JBoss Security and Identity Management
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>
> Check the requirements of POST requests when negotiation is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        



More information about the jboss-jira mailing list