无法下载备份

我无法下载我的 Discourse 的任何备份。

我的备份会自动存储在 AWS S3 存储桶中。文件确实存在,并且可以通过 AWS 控制台浏览到 S3 存储桶手动下载。

我正在运行 v3.1.0.beta2 (e64d1c4105)

重现步骤(我的浏览器是 macOS Ventura 13.2 上的 Safari 16.3):

  1. 转到 管理员 > 备份
  2. 点击下载按钮
  3. 到达后点击电子邮件中的链接

应该发生什么?

  • 备份应该下载

实际发生什么?

  • 浏览器窗口中出现错误:

Discourse 错误日志显示了一个致命错误:

ActionController::Redirecting::UnsafeRedirectError (不安全的重定向到“https://[REDACTED].s3.eu-west-2.amazonaws.com/default/[REDACTED]-2023-02-04…”,传递 allow_other_host: true 以便重定向):

还有:

ActionController::Redirecting::UnsafeRedirectError (不安全的重定向到“https://[REDACTED].s3.eu-west-2.amazonaws.com/default/[REDACTED]-2023-02-04...”,传递 allow_other_host: true 以便重定向):

app/controllers/admin/backups_controller.rb:87:in `show'
app/controllers/application_controller.rb:414:in `block in with_resolved_locale'
app/controllers/application_controller.rb:414:in `with_resolved_locale'
lib/middleware/omniauth_bypass_middleware.rb:74:in `call'
lib/content_security_policy/middleware.rb:12:in `call'
lib/middleware/anonymous_cache.rb:369:in `call'
config/initializers/100-quiet_logger.rb:20:in `call'
config/initializers/100-silence_logger.rb:29:in `call'
lib/middleware/enforce_hostname.rb:24:in `call'
lib/middleware/request_tracker.rb:228:in `call'

回溯

actionpack (7.0.4.1) lib/action_controller/metal/redirecting.rb:193:in `_enforce_open_redirect_protection'
actionpack (7.0.4.1) lib/action_controller/metal/redirecting.rb:89:in `redirect_to'
actionpack (7.0.4.1) lib/action_controller/metal/flash.rb:62:in `redirect_to'
actionpack (7.0.4.1) lib/action_controller/metal/instrumentation.rb:42:in `block in redirect_to'
activesupport (7.0.4.1) lib/active_support/notifications.rb:206:in `block in instrument'
activesupport (7.0.4.1) lib/active_support/notifications/instrumenter.rb:24:in `instrument'
activesupport (7.0.4.1) lib/active_support/notifications.rb:206:in `instrument'
actionpack (7.0.4.1) lib/action_controller/metal/instrumentation.rb:41:in `redirect_to'
app/controllers/admin/backups_controller.rb:87:in `show'
actionpack (7.0.4.1) lib/action_controller/metal/basic_implicit_render.rb:6:in `send_action'

环境

HTTP HOSTS: greyarro.ws
3 个赞

这是一个修复程序:

6 个赞

太棒了!感谢修复(以及修复的速度!):bowing_man::t2:

3 个赞