caorongjin/liferay-portal — pull request #78 by zberentey (2012-08-31 14:51:02+00:00)
Title: LPS-28583

Hey Alex, Could you take a look at this? I assume it is safe to always use the ip address from the request to check if the trackback URL is really for this server. The original problem was that the layout full URL in service context is initialized with the canonical URL that is http://localhost:8080... in our case, so it resolved to 127.0.0.1 instead of the actual server ip. I'm not sure if we need this check at all. For proxied sites the tracback URL will reflect the original URI I think because it comes from the request as well, so there is no point checking with the inner server IP. Anyways, if you see any problems let me know. Thanks, Zsolt.