Alain Bourgeois

This is the test that fails for me on WSL2 https://github.com/nodeSolidServer/node-solid-server/blob/21096e209d7c6e23f67c8b4bf9ad546301ebf4a3/test/integration/http-test.js#L1161

A few links to help anyone interested in this issue : - Actual insecure implementation in NSS : - https://github.com/nodeSolidServer/node-solid-server/blob/958a6ef82e67c5bfc000488aca4c8bfdd6a9bfa0/lib/create-server.js#L7 - https://github.com/nodeSolidServer/node-solid-server/blob/958a6ef82e67c5bfc000488aca4c8bfdd6a9bfa0/lib/handlers/get.js#L32 - https://github.com/nodeSolidServer/node-solid-server/blob/958a6ef82e67c5bfc000488aca4c8bfdd6a9bfa0/lib/ldp.js#L336 - In CSS https://github.com/CommunitySolidServer/CommunitySolidServer/tree/main/src/server/notifications and in...

@csarven @jeff-zucker @zg009 The CorsProxy is implemented in https://github.com/nodeSolidServer/node-solid-server/blob/f5652f3dfa3ae630408125af99bcf90b7fe21c0d/lib/handlers/cors-proxy.js#L66 3 middlewares are called : - `path` is the proxy path. By default `/proxy` - a NSS express middleware `extractProxyConfig` https://github.com/nodeSolidServer/node-solid-server/blob/f5652f3dfa3ae630408125af99bcf90b7fe21c0d/lib/handlers/cors-proxy.js#L69-L70...

In NSS the `allow.js` handler middleware is in charge of checking if you are logged and in and have allowed permissions https://github.com/nodeSolidServer/node-solid-server/blob/21096e209d7c6e23f67c8b4bf9ad546301ebf4a3/lib/handlers/allow.js#L18-L22 I believe that the interesting line in your...

> I think we need to be able to single out MAY rules, so a server can choose to run the test for the one they implement but not the...

If the ID option is retained, if defined the ID shall be displayed explicitly in the test name `it(${level} ${Id} ${name}, runner)` I agree to require a level. For practical...

I'm sorry to not understand your point. But I am not an expert and even less in security. A Solid Pod is a web server. As such should serve html...

This is @timbl example GET /timbl/Public/Test/Content-Type/application/ld-json/schema-article.jsonld This is not a ld+json file. The json+ld is included in a `script` It could be resolved for an HTML mimeType if the server...

> GET https://timbl.com/timbl/Public/Test/Content-Type/application/ld-json/schema-article.jsonld Yes. That's what I tested

Thanks for reporting. To help understand your problem could you tell us more: - server used : NSS, CSS, public instance - where do you store your friends ? Are...