Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix issue w/ running chromium headless over http when Kibana itself is accessed publicly via https #20528

Merged

Conversation

chrisdavies
Copy link
Contributor

If you run Kibana over https, but the reporting background workers connect to Kibana via an unsecured local connection (e.g. http://0.0.0.0), the report fails due to the fact that it is sending an https referrer header over an unsecured connection. This PR fixes this issue by removing the referrer header altogether.

when the original reporting request was https
@chrisdavies chrisdavies requested review from nreese and kobelb July 6, 2018 17:57
Copy link
Contributor

@nreese nreese left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm
code review

Copy link
Contributor

@kobelb kobelb left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM - I can't think of any reason why forcing the referer header that was grabbed during the "create job" request provides any additional security over the way we're currently building relative URLs.

@elasticmachine
Copy link
Contributor

💚 Build Succeeded

@chrisdavies chrisdavies merged commit e34dbd0 into elastic:master Jul 6, 2018
chrisdavies added a commit to chrisdavies/kibana that referenced this pull request Jul 9, 2018
Remove the referrer header from report requests.
chrisdavies added a commit to chrisdavies/kibana that referenced this pull request Jul 9, 2018
Remove the referrer header from report requests.
chrisdavies added a commit to chrisdavies/kibana that referenced this pull request Jul 9, 2018
Remove the referrer header from report requests.
chrisdavies added a commit that referenced this pull request Jul 9, 2018
Remove the referrer header from report requests.
chrisdavies added a commit to chrisdavies/kibana that referenced this pull request Jul 9, 2018
Remove the referrer header from report requests.
chrisdavies added a commit that referenced this pull request Jul 9, 2018
Remove the referrer header from report requests.
@stacey-gammon stacey-gammon added :Sharing v6.4.0 (Deprecated) Feature:Reporting Use Reporting:Screenshot, Reporting:CSV, or Reporting:Framework instead v6.3.2 v7.0.0 labels Jul 16, 2018
@stacey-gammon
Copy link
Contributor

Just a reminder @chrisdavies to add version tags when merging so we know which version the feature gets into. (already added them to this PR)

@chrisdavies chrisdavies deleted the reporting/chromium-https-bug branch January 16, 2019 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
(Deprecated) Feature:Reporting Use Reporting:Screenshot, Reporting:CSV, or Reporting:Framework instead v6.3.2 v6.4.0 v7.0.0
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants