SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0002609: no url filtering/blacklisting on httpS - MantisBT Endian Bugtracker
Endian Issue Tracker





Please see now our new Bugtracker system: JIRA








View Issue Details Jump to Notes ] Issue History ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0002609Endian FirewallProxy HTTPpublic2010-01-10 18:132010-06-07 14:05
Reporterspeedy3k 
Assigned Tosimon-endian 
PrioritynormalSeverityminorReproducibilityhave not tried
StatusacknowledgedResolutionopen 
PlatformOSOS Version
Product Version2.3 
Target VersionfutureFixed in Version 
Summary0002609: no url filtering/blacklisting on httpS
DescriptionI understand that content filtering on httpS can't be done without breaking ssl with a man in the middle attack. However, url filering and blacklisting should still apply to https.

for example.
facebook.com is blacklisted
http://www.facebook.com [^] is blocked
httpS://www.facebook.com [^] is allowed easily defeating the filter.
TagsNo tags attached.
Attached Files

- Relationships

-  Notes
There are no notes attached to this issue.

- Issue History
Date Modified Username Field Change
2010-01-10 18:13 speedy3k New Issue
2010-01-21 18:57 peter-endian Status new => acknowledged
2010-01-21 18:58 peter-endian Status acknowledged => new
2010-01-21 18:58 peter-endian Assigned To => simon-endian
2010-01-21 18:58 peter-endian Status new => acknowledged
2010-06-07 14:05 peter-endian Target Version => future

Copyright © 2005-2008 Endian, SRL. All rights reserved.


Copyright © 2000 - 2012 MantisBT Group
Powered by Mantis Bugtracker