spring-projects / spring-projects/spring-security

HttpsRedirectWebFilter can redirect to `https:/`

Open
#16,968 1 comment 1 reaction 0 assignees View on GitHub

Nobody has claimed this yet.

status: waiting-for-triage type: bug
Dominant language
Java
Stars
9.6k
Forks
6.3k
Avg merge
2d 11h
Merged PRs (30d)
52

Description

This is quite possibly a bug in the underlying component(s), but the following test will fail:

this.webTestClient
	.get()
	.uri("/")
	.exchange()
	.expectHeader().location("https://localhost/"); // location = "https:/"

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reproducing the shown WebTestClient request and tracing HttpsRedirectWebFilter's redirect-location handling; the issue provides no source-file or test path. Done means the response Location header is exactly "https://localhost/" rather than "https:/".

Written by the indexing model from the issue text.

Assessment

Tech stack
java, spring
Domain
security, web-dev
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.