You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When going to https://example.com. you end up at the same domain and same site as https://example.com except that all Laravel Route and url functions include this . at the end of the domain.
Statamic caches this in _.html instead of e.g. ._.html (or rather not caching at all) causing anyone to visit https://example.com after this to have all links pointed to https://example.com.
This causes issues because other applications do consider this to be a completely separate domain. This breaks access-control-allow-origin for instance.
How to reproduce
Set up static caching on a domain (preferably served by nginx)
navigate tot his domain with a . added to the end.
Check if it has been cached.
Now navigate to the same domain without that .
Search your html for your domain with the . included at the end.
Bug description
When going to
https://example.com.
you end up at the same domain and same site ashttps://example.com
except that all Laravel Route and url functions include this.
at the end of the domain.Statamic caches this in
_.html
instead of e.g.._.html
(or rather not caching at all) causing anyone to visithttps://example.com
after this to have all links pointed tohttps://example.com.
This causes issues because other applications do consider this to be a completely separate domain. This breaks
access-control-allow-origin
for instance.How to reproduce
Set up static caching on a domain (preferably served by nginx)
navigate tot his domain with a
.
added to the end.Check if it has been cached.
Now navigate to the same domain without that
.
Search your html for your domain with the
.
included at the end.Logs
Environment
Installation
Fresh statamic/statamic site via CLI
Additional details
A temporary solution can be found here: https://stackoverflow.com/questions/15452328/nginx-redirect-domain-trailing-dot
The text was updated successfully, but these errors were encountered: