diff options
author | Ed Tanous <edtanous@google.com> | 2023-03-28 00:43:19 +0300 |
---|---|---|
committer | Ed Tanous <ed@tanous.net> | 2023-06-08 19:40:08 +0300 |
commit | c51a58ee9231e48bb25ede75307591758f911395 (patch) | |
tree | d0c17dfd7aff3cc453fee667ff999fa0f61908ee /http | |
parent | f9c794fbf2053c664902efa5d9ef638ef08acb38 (diff) | |
download | bmcweb-c51a58ee9231e48bb25ede75307591758f911395.tar.xz |
Remove urlEncode
All new uses should be using boost::urls::url now. This was the last
usage.
Tested: Logged into webui, and observed the correct URL behavior.
In browser window /foobar
Forwarded to /?next=/foobar#/login
Which is correct.
Note, this is different behavior slightly than before. It was found
that the URI precedence goes query string THEN fragment, rather than the
other way around that we had it. This was flagged when moving over to
boost url structures.
Signed-off-by: Ed Tanous <edtanous@google.com>
Change-Id: Ifb354537d71a43c531d7d380dd889cf646731e39
Diffstat (limited to 'http')
-rw-r--r-- | http/http_connection.hpp | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/http/http_connection.hpp b/http/http_connection.hpp index cb0da2679c..11964e0c36 100644 --- a/http/http_connection.hpp +++ b/http/http_connection.hpp @@ -216,7 +216,7 @@ class Connection : } keepAlive = thisReq.keepAlive(); #ifndef BMCWEB_INSECURE_DISABLE_AUTHX - if (!crow::authentication::isOnAllowlist(req->url().buffer(), + if (!crow::authentication::isOnAllowlist(req->url().path(), req->method()) && thisReq.session == nullptr) { |