Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • G gitlabhq1
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Repository
    • Repository
    • Files
    • Commits
    • Branches
    • Tags
    • Contributors
    • Graph
    • Compare
  • Issues 21
    • Issues 21
    • List
    • Boards
    • Service Desk
    • Milestones
  • Merge requests 12
    • Merge requests 12
  • CI/CD
    • CI/CD
    • Pipelines
    • Jobs
    • Schedules
  • Deployments
    • Deployments
    • Environments
    • Releases
  • Monitor
    • Monitor
    • Incidents
  • Packages & Registries
    • Packages & Registries
    • Package Registry
    • Infrastructure Registry
  • Analytics
    • Analytics
    • CI/CD
    • Repository
    • Value stream
  • Wiki
    • Wiki
  • Snippets
    • Snippets
  • Activity
  • Graph
  • Create a new issue
  • Jobs
  • Commits
  • Issue Boards
Collapse sidebar
  • gpt
  • large_projects
  • gitlabhq1
  • Issues
  • #9344

Closed
Open
Created May 29, 2015 by Administrator@rootOwner

Relative URL for Avatars

Created by: jangrewe

I have an issue with avatars not showing up because they are always requested from the configured URL, not the hostname i'm accessing GitLab on (and into which i'm logged in).

If i have http://gitlab.example.com configured that the site URL, and access GL via http://gitlab, the avatars are requested from http://gitlab.example.com, for which i (sometimes) don't have a login session.

I'm not sure if there are any security implications to this, but i think they should be loaded from the same hostname that the site is being accessed, probably most easily accomplished by just using a relative URL instead of prepending the hostname, too. Another option would be to generally redirect all accesses to the configured hostname, so that this issue doesn't happen.

Assignee
Assign to
Time tracking