redirects from http to https fail

• Component: Platform
• Status: RESOLVED FIXED

[Darin Fisher (:fishd, Google)]

redirects from http to https fail

we need to pass INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTPS in the flags parameter to InternetOpenUrlA.  we probably want to specify INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP as well, and do so for POST requests as well as GET requests.

[Darin Fisher (:fishd, Google)]

Created attachment 11050 [details]
patch

This patch helps a bunch, but there is still a failure case with redirected POST requests.  For some reason those generate an error of ERROR_HTTP_REDIRECT_NEEDS_CONFIRMATION.  I'm not sure yet how to deal with that error or how to suppress it.  I'm going to file a new bug on it.

[Alexey Proskuryakov]

(In reply to comment #1)
> I'm not sure yet how to deal with that
> error or how to suppress it.  I'm going to file a new bug on it.

Per the HTTP standard, the UA must request confirmation from the user via a dialog box when redirecting POST requests. However, many UAs (including WebKit/Mac) transform the request into a GET, thus avoiding the need to display a dialog box.

See bug 11118 and bug 11119 for some discussion.

[Darin Fisher (:fishd, Google)]

Right, I believe it is necessary to convert POST to GET for 302s in order to be compatible with the web.  However, I'm not sure if that is something that WinInet can be configured to do, or if it is necessary for the app to read the 302 response and issue a fresh GET request.

[Maciej Stachowiak]

Comment on attachment 11050 [details]
patch

r=me

I'll commit this.

[Maciej Stachowiak]

Committed.