{"issue":{"user":{"id":1240282,"login":"jsamuel","url":"https://api.github.com/users/jsamuel","avatar_url":"https://secure.gravatar.com/avatar/bc1d195cedb959a3946572b08ce9e7c7?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"bc1d195cedb959a3946572b08ce9e7c7"},"milestone":null,"title":"infrequently paths showing as allowed destination hosts in menu","created_at":"2011-12-22T03:53:29Z","labels":[{"name":"extension","url":"https://api.github.com/repos/RequestPolicy/requestpolicy/labels/extension","color":"ededed"}],"state":"closed","updated_at":"2011-12-22T03:53:33Z","id":2632878,"html_url":"https://github.com/RequestPolicy/requestpolicy/issues/39","closed_at":"2011-12-22T03:53:33Z","pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"body":"Sometimes a path will show up as an allowed destination hostname in the menu. I finally found a repeatable (for the moment) example of this happening and it appears to be with a 303 Object Moved redirect to a location that is just a path (no protocol + host).\r\n\r\nExample with some specifics removed (so you don't know what coupon my wife wanted me to print):\r\n\r\nhttp://coupons2.smartsource.com/smartsource/index.jsp?Link=XXXXXXX\r\n\r\nelicited the following Location header in the response:\r\n\r\nLocation: /YYYYYYY/dcs.gif?dcsredirect=126&dcstlh=0&...\r\n\r\nwhich appears to match what I see in the !RequestPolicy menu.\r\n\r\nHowever, it seems like there must be more to it as one would think this would be fairly common and so the bug would have been visible more frequently. I'll need to come up with a repeatable test case to be sure that this is the issue.","number":39,"url":"https://api.github.com/repos/RequestPolicy/requestpolicy/issues/39","comments":1,"assignee":null},"action":"closed"}