Uploaded image for project: 'ZABBIX BUGS AND ISSUES'
  1. ZABBIX BUGS AND ISSUES
  2. ZBX-15963

HTTP agent supports non-HTTP scheme in URL field

XMLWordPrintable

    • Sprint 51 (Apr 2019), Sprint 52 (May 2019), Sprint 53 (Jun 2019), Sprint 54 (Jul 2019)
    • 0.25

      HTTP agent allows using non-HTTP scheme (make non HTTP(s) requests). For example, URL "ftp://your-server.here/" will work just fine and will return directory listing.

      Currently there is no validation of scheme and this makes term HTTP agent invalid as it allows to make requests to: HTTP, FTP, POP3, IMAP, SMB, etc (https://curl.haxx.se/libcurl/c/CURLOPT_URL.html).

      From the perspective of UI there are many fields that are not valid for FTP, POP3 and other protocols so for the sake of consistancy, scheme check should be introduced and only HTTP(s) scheme should be allowed in HTTP checks.

            asestakovs Aleksejs Sestakovs
            vjaceslavs Vjaceslavs Bogdanovs
            Team C
            Votes:
            0 Vote for this issue
            Watchers:
            9 Start watching this issue

              Created:
              Updated:
              Resolved: