{"action":"closed","issue":{"url":"https://api.github.com/repos/TAXIIProject/django-taxii-services/issues/40","labels_url":"https://api.github.com/repos/TAXIIProject/django-taxii-services/issues/40/labels{/name}","comments_url":"https://api.github.com/repos/TAXIIProject/django-taxii-services/issues/40/comments","events_url":"https://api.github.com/repos/TAXIIProject/django-taxii-services/issues/40/events","html_url":"https://github.com/TAXIIProject/django-taxii-services/issues/40","id":61028616,"number":40,"title":"Discovery response & Collection Information Response needs a fully qualified URL in <Address> element","user":{"login":"ScottyAU","id":902373,"avatar_url":"https://avatars.githubusercontent.com/u/902373?v=3","gravatar_id":"","url":"https://api.github.com/users/ScottyAU","html_url":"https://github.com/ScottyAU","followers_url":"https://api.github.com/users/ScottyAU/followers","following_url":"https://api.github.com/users/ScottyAU/following{/other_user}","gists_url":"https://api.github.com/users/ScottyAU/gists{/gist_id}","starred_url":"https://api.github.com/users/ScottyAU/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ScottyAU/subscriptions","organizations_url":"https://api.github.com/users/ScottyAU/orgs","repos_url":"https://api.github.com/users/ScottyAU/repos","events_url":"https://api.github.com/users/ScottyAU/events{/privacy}","received_events_url":"https://api.github.com/users/ScottyAU/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-03-13T10:11:23Z","updated_at":"2015-03-30T14:12:01Z","closed_at":"2015-03-30T14:12:01Z","body":"Currently a discovery response returns just a path without the hostname in the \\<Address\\> element.  \r\n\r\nAfter discussing on the TAXII mailing list [1], consensus is that the \\<Address\\> element should be a fully qualified URL.\r\n\r\n@MarkDavidson suggested there could be a django-solo config instance in django-taxii-services which holds a server hostname to use (if specified), or if the value is not specified, the code could attempt to auto-detect the correct value.\r\n\r\nSounds fair to me.  \r\n\r\n1. http://making-security-measurable.1364806.n2.nabble.com/TAXII-Discovery-Response-Question-SEC-UNCLASSIFIED-td7586075.html"}}