Botão "Mostrar Post Completo" não funciona em instalações de subpasta

Falco · 18 Dezembro , 2025 19:36

Graças ao @Thiago_Mobilon, encontrei o problema e tenho uma correção proposta

github.com/discourse/discourse

FIX: FinalDestination ignoring all URLs on domain for subfolder installs

main ← fix-final-destination-subfolder-ignore

opened 07:35PM - 18 Dec 25 UTC

xfalcox

+56 -5

For subfolder installs (e.g. `example.com/forum`), `FinalDestination` was ignori…ng all URLs on the parent domain instead of just URLs under the subfolder path. ### Problem When Discourse is installed in a subfolder like `https://tecnoblog.net/comunidade/`, attempting to onebox/fetch URLs like `https://tecnoblog.net/noticias/...` (WordPress blog on same domain) would fail because FinalDestination immediately returned without making any HTTP request. ### Cause - `Discourse.base_url_no_prefix` returns just `https://tecnoblog.net` (no path) - Only hostnames were stored in the ignored list - Any URL on `tecnoblog.net` matched and was ignored ### Fix - Use `Discourse.base_url` which includes the subfolder path - Store both hostname and path in the ignored list - Check both hostname AND path prefix when determining if a URL should be ignored ### Security SSRF protection is unaffected - it runs after the ignored check, so URLs that are no longer ignored still go through IP validation. Added a test to verify this.

Tópico		Respostas	Vistas
Embed Discourse comments on another website via Javascript Integrations embedding , how-to	127	306993	2 Junho , 2026
Embed URL Inconsistencies in Discourse Product Support embedding , wordpress	1	177	3 Janeiro , 2026
Discourse embed blocked on "Loading Discussion..." Product Support embedding	5	2727	13 Outubro , 2015
Discourse Comments stuck on "Loading..." Product Support	22	2449	18 Setembro , 2024
Embedding a list of Discourse Topics in another site Announcements embedding	91	24140	25 Fevereiro , 2024

Botão "Mostrar Post Completo" não funciona em instalações de subpasta

Related topics