freeipa/ipaserver
Stanislav Levin e3f37960a0
Don't use cross-origin request
'Origin' for IPA login page is 'httpS://xxx'. But 'configured' link
has URL like 'http://xxx/ssbrowser.html'.

Since IPA web server doesn't use any kind of Access-Control-Allow-Origin
rules Mozilla Firefox blocks Cross-Origin request due to the Same Origin
policy violation.

So, just follow the Same Origin policy.

Fixes: https://pagure.io/freeipa/issue/7832
Signed-off-by: Stanislav Levin <slev@altlinux.org>
Reviewed-By: Serhii Tsymbaliuk <stsymbal@redhat.com>
2019-01-16 08:57:51 +01:00
..
advise Add install/remove package helpers to advise 2018-12-11 13:46:52 +01:00
dnssec Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
install Remove 389-ds templates now that lib389 is used for installs 2019-01-15 09:41:22 +01:00
plugins Don't use cross-origin request 2019-01-16 08:57:51 +01:00
secrets Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
__init__.py Change FreeIPA license to GPLv3+ 2010-12-20 17:19:53 -05:00
dcerpc_common.py Py3: Replace six.text_type with str 2018-09-27 16:11:18 +02:00
dcerpc.py ipaserver/dcerpc: fix exclusion entry with a forest trust domain info returned 2019-01-10 11:24:08 +01:00
dns_data_management.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00
Makefile.am Build: Makefiles for Python packages 2016-11-09 13:08:32 +01:00
masters.py Unify and simplify LDAP service discovery 2018-11-21 08:57:08 +01:00
p11helper.py pylint 2.2: Fix unnecessary pass statement 2018-11-26 16:54:43 +01:00
rpcserver.py Py3: Replace six.moves imports 2018-10-05 12:06:19 +02:00
servroles.py pylint 2.2: Fix unnecessary pass statement 2018-11-26 16:54:43 +01:00
setup.cfg Port all setup.py to setuptools 2016-10-20 18:43:37 +02:00
setup.py Cleanup shebang and executable bit 2018-07-05 19:46:42 +02:00
topology.py Py3: Remove subclassing from object 2018-09-27 11:49:04 +02:00