Le bouton "Afficher le message complet" ne fonctionne pas dans les installations en sous-dossier

Falco · Décembre 18, 2025, 7:36

Grâce à @Thiago_Mobilon, j’ai trouvé le problème et j’ai une correction proposée

github.com/discourse/discourse

FIX: FinalDestination ignoring all URLs on domain for subfolder installs

main ← fix-final-destination-subfolder-ignore

opened 07:35PM - 18 Dec 25 UTC

xfalcox

+56 -5

For subfolder installs (e.g. `example.com/forum`), `FinalDestination` was ignori…ng all URLs on the parent domain instead of just URLs under the subfolder path. ### Problem When Discourse is installed in a subfolder like `https://tecnoblog.net/comunidade/`, attempting to onebox/fetch URLs like `https://tecnoblog.net/noticias/...` (WordPress blog on same domain) would fail because FinalDestination immediately returned without making any HTTP request. ### Cause - `Discourse.base_url_no_prefix` returns just `https://tecnoblog.net` (no path) - Only hostnames were stored in the ignored list - Any URL on `tecnoblog.net` matched and was ignored ### Fix - Use `Discourse.base_url` which includes the subfolder path - Store both hostname and path in the ignored list - Check both hostname AND path prefix when determining if a URL should be ignored ### Security SSRF protection is unaffected - it runs after the ignored check, so URLs that are no longer ignored still go through IP validation. Added a test to verify this.

Sujet		Réponses	Vues
Embed Discourse comments on another website via Javascript Integrations embedding , how-to	127	304336	Juin 2, 2026
Embed URL Inconsistencies in Discourse Support embedding , wordpress	1	103	Janvier 3, 2026
Discourse embed blocked on "Loading Discussion..." Support embedding	5	2633	Octobre 13, 2015
Discourse Comments stuck on "Loading..." Support	22	2208	Septembre 18, 2024
Embedding a list of Discourse Topics in another site Announcements embedding	91	22623	Février 25, 2024

Le bouton "Afficher le message complet" ne fonctionne pas dans les installations en sous-dossier

Sujets connexes