I have a site with multiple domains. Each node has a source domain, so their canonical url is always linked to a specific domain. When I go to a node on a different domain, it tries to redirect to the domain source of the node. The problem is in RouteNormalizerRequestSubscriber: it's not using TrustedRedirectResponse, but a regular RedirectResponse.

I'll add a small patch to use the TrustedRedirectResponse for redirecting.

CommentFileSizeAuthor
#2 2908177-2.patch1.51 KBspadxiii

Comments

SpadXIII created an issue. See original summary.

spadxiii’s picture

spadxiii commented
Status: Active » Needs review
StatusFileSize
new 2908177-2.patch1.51 KB
berdir’s picture

berdir
Primary language German
Location Switzerland
commented
Status: Needs review » Fixed

Thanks, seen this too with multilingual domains, although there is a core issue to mark them safe as other places are also affected.

This makes sense and is hard to test as we don't have a unit test yet for this. So committing like this.

  • Berdir committed eaf07a6 on 8.x-1.x authored by SpadXIII 
    Issue #2908177 by SpadXIII: When using domain (and domain source)...

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.