-
Bug
-
Resolution: Done
-
Critical
-
None
-
None
-
None
There is code in Elytron
SetMechanismInformationMechanismFactory.java
@Override public void evaluateRequest(HttpServerRequest request) throws HttpAuthenticationException { String host = request.getFirstRequestHeaderValue(HOST); String resolvedHostName = null; if (host != null) { if (host.startsWith("[")) { int close = host.indexOf(']'); if (close > 0) { resolvedHostName = host.substring(0, close); } }
I assume intention of this code is to get from e.g. "[::1]:8080" just "[::1]", but now it gets only "[::1". To achieve this my assumption, there should be rather
resolvedHostName = host.substring(0, close + 1);
- clones
-
JBEAP-9975 Elytron, incorrect IPv6 address resolution in SetMechanismInformationMechanismFactory
- Closed