Automattic / Automattic/jetpack

IDC: Check `host` without being capitalization specific?

Open
#2,965 5 comments 0 reactions 0 assignees View on GitHub
Enhancement General IDC
Dominant language
PHP
Stars
1.8k
Forks
898
Avg merge
1d 18h
Merged PRs (30d)
774

Description

When the `host` portion of the URLs mismatch, do we need to throw the IDC prompt? Does anything break for failing to match the case of the `host` portion of the URL?

Would need to verify the signature isn't impacted.

Assuming nothing breaks, we should be less strict about case.

Contributor guide

Open the contributing guide

Research direction

Start by locating the IDC prompt's host comparison and the signature verification path. Check whether host casing affects URL signatures; done means confirming compatibility and defining a case-insensitive comparison without breaking verification.

Written by the indexing model from the issue text.

Assessment

Tech stack
php
Domain
security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.