Archiva

• Type: Task
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.2
• Fix Version/s: 1.3.3
• Component/s: Users/Security
• Labels:

  None

The redback referrer header check that was added can occasionally cause problems, and is only a preventative measure for other CSRF vulnerabilities.

It should be disabled by default, but the configuration for enabling it documented.

• Assignee:

  Brett Porter

  Reporter:

  Brett Porter

• Created:

  14/Dec/10 8:29 PM

  Updated:

  14/Dec/10 9:59 PM

  Resolved:

  14/Dec/10 9:59 PM