Details
-
Bug
-
Resolution: Timed out
-
Medium
-
None
-
4.3.6, 5.2.5
-
4
-
Severity 2 - Major
-
Description
Summary
Whenever an external gadget (not from Atlassian products) is added into Confluence, it doesn't work. Sniffing the error using firebug will reveal this error:
"Requests to http://www.nonexistance.com/json/builders/ are not allowed. See your administrator about configuring a whitelist entry for this destination (http://confluence.atlassian.com/x/KQfCDQ )."
However, the whitelist configuration had already been set to Allow all URLs. Therefore the error is somehow misleading.
error in the logs
2013-08-20 18:00:39,576 WARN [http-8436-4] [renderer.internal.http.HttpClientFetcher] fetch A request to http://www.nonexistance.com/json/builders/ has been denied. To allow requests to this URL add the application URL to your whitelist (http://confluence.atlassian.com/x/KQfCDQ ). -- url: /confluence/plugins/servlet/gadgets/makeRequest | userName: admin | referer: http://localhost:8436/confluence/plugins/servlet/gadgets/ifr?container=atlassian&mid=141734051840&country=GB&lang=en&view=default&view-params=%7B%22writable%22%3A%22true%22%7D&st=atlassian%3A1KUXMudmWkVx3a%2FiHuowS2WgxOCr4taqOFSPHWqoVnS0EGVG%2BAegKTol%2B2dINQ9N98J11hrlW1eaCw409dIp2JvM7%2FCKPdk3N6JJnHv%2Fef%2BFHcuyQ0JPCcqBCOKEm9B%2Fqb7wkHv2DxE7xH0qto%2B5iN6LWtC66WTNdoPpDj13xVsGSljalrza5zL3%2BEPsVTX6EeQouQ%3D%3D&up_baseURL=http%3A%2F%2Fwww.nonexistance.com&up_category=&url=http%3A%2F%2Flocalhost%2Ftest.xml&libs=auth-refresh 2013
Steps to reproduce
- Host the external gadget's .xml file into Apache server. Confirm this by accessing the file through browser using http://localhost/test.xml.
- Add the gadget via gadget url into Confluence by Confluence Admin >> External Gadgets.
- Configure Whitelist to allow all URLs.
- Run Firebug in Firefox.
- Create a new page and try adding the gadget. Before saving it, click Refresh and note the error in Firebug
Attachments
Issue Links
- relates to
-
CONFSERVER-15981 Confluence unable to add domains to whitelist
- Closed