1459476 - Firefox fails to implement JavaScript POST redirection like all other browsers

Status: NEW

(Core :: DOM: Navigation, defect, P4)

Description

[Francisco Corella]

Attachment: postRedirection.js

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.139 Safari/537.36

Steps to reproduce:

All browsers other than Firefox (Chrome, Edge, IE, Safari) interpret an HTML page with no content other than a script that creates and posts a form as a JavaScript POST redirection, replacing the URL of the page with the target of the POST (the value of the action attribute of the form) in the browser history.  Firefox keeps the URL in the history, so that a click on the back button after the POST replays the POST.  The attached file is a Node.js application that demonstrates this.  Run it, visit Page 1 at /page1.html and submit the form.  This causes a POST request to /postTarget, which responds with a JavaScript POST rediretion to Page 2 at /page2.html.  After reaching Page 2, click the back button.


Actual results:

As can be seen in the browser console, clicking the back button results in a replay of the script at /postTarget and a return to Page 2.  The user is stuck at Page 2 and cannot go back to earlier pages using the back button.  Worse, the replay of the back button can have consequences unforeseen by the developer, like executing a payment transaction twice.


Expected results:

Clicking the back button at Page 2 should go to Page 1.  Chrome, Edge, IE and Safari do this.  Many developer forums recommend implementing POST redirection as exemplified in the attachment, but developers are not aware the Firefox does not implement it like the other browsers.

Comment 1

[Daniel Bodea [:danibodea]]

This issue occurs as explained by the reporter:
After running the node.js app provided by the reporter and trying the steps provided by him in any of the 3 main Mozilla version (nightly - v62.0a1, beta - 60.0, release - 59.0.3), the issue is reproduced (after clicking the browser's back button on page 2, the user is not redirected to page 1, but back to page 2).
This issue does not occur on the Chrome browser.

Comment 2

[Henri Sivonen (:hsivonen)]

I don't find anything in the spec that says to omit a history entry if a script navigates away from the page before the load completes. Is there such spec language? Should there be?

Comment 3

[Anne (:annevk)]

I don't think so and maybe; in large part this is also governed by UI choices that are very much up to the user agent. However, if this is a prevalent pattern as indicated by OP it should probably be covered.

Comment 4

[Francisco Corella]

(In reply to Henri Sivonen (:hsivonen) from comment #2)
> I don't find anything in the spec that says to omit a history entry if a
> script navigates away from the page before the load completes. Is there such
> spec language? Should there be?

After some additional experimentation, it seems that the issue is not whether to omit the URL of the current page from the history, but whether to replace it with the target URL of POST request.  Please see the blog post https://pomcor.com/2018/05/16/a-bypass-of-the-firefox-post-redirection-bug/

Comment 5

[Michael Edison]

A program is installed for the identification of the bug. The removal of the best essay writing service australia for all offers. The rank is filed for the picture and its branch for the offered for the use of the posture by all positive shapes.

Comment 6

[Peter Kyle]

Some websites might have a problem with cookies. Sometimes this can cause a redirect loop. If you allow cookies from this website, it may solve the problem. In Firefox, if there is a block on a website, that means there are too many redirects on that page. Clearing your cookies for this website might help.
dock builder fort lauderdale

Comment 7

[David Harbor]

The Reddit thread on Mangools' competitors and affordable SEO tools opened up a world of possibilities https://www.reddit.com/r/SEO_cases/comments/13equfz/mangools_competitors_list_of_affordable_seo_tools/. The community's recommendations and personal experiences provided valuable insights into other cost-effective options. It's a great starting point for anyone seeking affordable yet effective SEO tools.

Comment 8

[mollyyang2106]

Thank you very much for your help! If you are engaged in SEO promotion of your web resource, then you know how dynamic the list of SEO tools used today is. There are new, little-known ones that are able to compete with the already existing ones. Here is a great article about best rank trackers, in which the author has collected the best SEO tools for tracking the ranking of your web resource. This will help you decide and choose the most effective tool or platform for you.

Comment 9

[mollyyang2106]

Thank you very much for your help! If you are engaged in SEO promotion of your web resource, then you know how dynamic the list of SEO tools used today is. There are new, little-known ones that are able to compete with the already existing ones. Here is a great article about best rank trackers, in which the author has collected the best SEO tools for tracking the ranking of your web resource. This will help you decide and choose the most effective tool or platform for you.

Comment 10

[William]

It's no secret that history assignments can be overwhelming. However, this website <a href="https://myhomeworkdone.com/history.html">learn more</a> has consistently been my go-to solution for tackling them. Their dedication to providing top-tier history homework assistance has not only improved my grades but also fostered a deeper appreciation for the subject.