55028 - Repost of form data does not send HTTP_REFERER

Status: VERIFIED FIXED

(Core :: DOM: Core & HTML, defect, P3)

Description

[Scott Milne]

If you repost form data from a server. The HTTP_REFERER header is not reposted 
aswell. The repost of the HTTP_REFERER works on NS4- and IE5-

This URL has an example of what is expected:

http://www.netprogs.com/cgi-bin/repost.pl

Comment 1

[don]

Radha, is this our bug or should it go to the form submission folks or maybe
someone else?

Comment 2

[sairuh (rarely reading bugmail)]

claudius, if this ends up going to Form Submission, reassign as needed...

Comment 3

[Kurt Weinschenker]

Seeing this on Mac OS 9.0.4 as well.  Build 2000100208-M18.

Comment 4

[Gervase Markham [:gerv]]

Confirming based on two sightings. -> Form Submission, initially.

Gerv

Comment 5

[bminisi]

This is not just a form problem. Any reload of the page fails to send the
http_referer information of that page. This causes problems for applications
that restrict access based on the referer information.

Comment 6

[Andrew Thompson]

Yup, this is causing us some nasty problems with our application security

Comment 7

[Lars Linek]

i checked the testcase and everything worked fine...
...i think this is fixed in build id 2001032408 on windows isn't it?
other platforms?

Comment 8

[Randell Jesup [:jesup] (needinfo me)]

FreeBSD 4.1 20010323xx

I tried this and a reload does NOT pass the referrer; in fact, it doesn't repost
the data at all - it displays the form again.

NOTE (this may be relevant): I'm using memory cache only; disk cache is totally
disabled.

Mozilla still has lots of problems with form data, results of posts, etc.

Comment 9

[Lars Linek]

Randell,
did you use the trunk or the latest 0.8.1 build?
the trunk reposts the data... the 0.8.1 doesn't and you
see the form again (on 0.8.1 builds)
would be interested in knowing if the trunk build on bsd is
misbehaving too.

Comment 10

[Randell Jesup [:jesup] (needinfo me)]

Trunk:

>FreeBSD 4.1 20010323xx

Pulled on Friday I believe.

Comment 11

[Radha on family leave (not reading bugmail)]

I checked in a fix for this on friday.  Can someone try  it out? Thanks, 

Comment 12

[Randell Jesup [:jesup] (needinfo me)]

Rechecked with fresh pull today (3/26).  Seems to work fine now.  I recommend
closing as fixed.

Comment 13

[Radha on family leave (not reading bugmail)]

This was fixed last friday

Comment 14

[Claudius Gayle]

VERIFIED Fixed with 2001032708 builds.