Merge pull request #25106 from luiseufrasio/luiseufrasio-CVE-2024-7312-link-redirection-via-host-parameter

setting local Name and Port for /managment/* URI

Author: dmatej

nucleus/admin/rest/rest-service/src/main/java/org/glassfish/admin/rest/adapter/RestManagementAdapter.java

@@ -18,6 +18,8 @@
 package org.glassfish.admin.rest.adapter;
 
 import org.glassfish.admin.restconnector.Constants;
+import org.glassfish.grizzly.http.server.Request;
+import org.glassfish.grizzly.http.server.Response;
 import org.jvnet.hk2.annotations.Service;
 
 /**
@@ -32,4 +34,11 @@ public class RestManagementAdapter extends RestAdapter {
     public RestManagementAdapter() {
         super(new RestManagementResourceProvider());
     }
+
+    @Override
+    public void service(Request req, Response res) {
+        req.setServerName(req.getLocalName());
+        req.setServerPort(req.getLocalPort());
+        super.service(req, res);
+    }
 }