You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Geostore responses with a wrong 403 code to requesting nonexistent resource by an unlogged user
See following image.
Request header:
GET /rest/geostore/extjs/resource/174735 HTTP/1.1
Host: localhost:8081
Connection: keep-alive
Accept: application/json, text/plain, /
DNT: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Referer: http://localhost:8081/?debug=true
Accept-Encoding: gzip, deflate, br
Accept-Language: en,it;q=0.9,it-IT;q=0.8,de;q=0.7,en-US;q=0.6
Cookie: csrftoken=mncEBN9oPPOLPKIVrKrExmYDe6luFBiP8bUcisEbGmQ8kFgTF5E1KTHkFXy78gbl; sessionid=w72qk7ewqve35yhgoz441ewvcow3cd4y
Geostore responses with a wrong 403 code to requesting nonexistent resource by an unlogged user
See following image.
Request header:
GET /rest/geostore/extjs/resource/174735 HTTP/1.1
Host: localhost:8081
Connection: keep-alive
Accept: application/json, text/plain, /
DNT: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/79.0.3945.130 Safari/537.36
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Referer: http://localhost:8081/?debug=true
Accept-Encoding: gzip, deflate, br
Accept-Language: en,it;q=0.9,it-IT;q=0.8,de;q=0.7,en-US;q=0.6
Cookie: csrftoken=mncEBN9oPPOLPKIVrKrExmYDe6luFBiP8bUcisEbGmQ8kFgTF5E1KTHkFXy78gbl; sessionid=w72qk7ewqve35yhgoz441ewvcow3cd4y
Response header:
HTTP/1.1 403 Forbidden
X-Powered-By: Express
date: Thu, 30 Jan 2020 11:53:01 GMT
server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
cache-control: no-cache
expires: -1
content-type: text/plain; charset=UTF-8
content-length: 21
access-control-allow-origin: *
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
access-control-allow-headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
connection: close
The text was updated successfully, but these errors were encountered: