Bug 11265

Summary: redirects from http to https fail
Product: WebKit Reporter: Darin Fisher (:fishd, Google) <fishd>
Component: PlatformAssignee: Darin Fisher (:fishd, Google) <fishd>
Status: RESOLVED FIXED    
Severity: Major CC: ap
Priority: P2    
Version: 420+   
Hardware: PC   
OS: Windows XP   
Attachments:
Description Flags
patch mjs: review+

Darin Fisher (:fishd, Google)
Reported 2006-10-12 10:48:20 PDT
redirects from http to https fail we need to pass INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTPS in the flags parameter to InternetOpenUrlA. we probably want to specify INTERNET_FLAG_IGNORE_REDIRECT_TO_HTTP as well, and do so for POST requests as well as GET requests.
Attachments
patch (5.49 KB, patch)
2006-10-12 11:50 PDT, Darin Fisher (:fishd, Google) 		mjs: review+
DetailsFormatted DiffDiff
View All Add attachment proposed patch, testcase, etc.
Darin Fisher (:fishd, Google)
Comment 1 2006-10-12 11:50:53 PDT
Created attachment 11050 [details] patch This patch helps a bunch, but there is still a failure case with redirected POST requests. For some reason those generate an error of ERROR_HTTP_REDIRECT_NEEDS_CONFIRMATION. I'm not sure yet how to deal with that error or how to suppress it. I'm going to file a new bug on it.
Alexey Proskuryakov
Comment 2 2006-10-15 02:54:51 PDT
(In reply to comment #1) > I'm not sure yet how to deal with that > error or how to suppress it. I'm going to file a new bug on it. Per the HTTP standard, the UA must request confirmation from the user via a dialog box when redirecting POST requests. However, many UAs (including WebKit/Mac) transform the request into a GET, thus avoiding the need to display a dialog box. See bug 11118 and bug 11119 for some discussion.
Darin Fisher (:fishd, Google)
Comment 3 2006-10-16 08:26:19 PDT
Right, I believe it is necessary to convert POST to GET for 302s in order to be compatible with the web. However, I'm not sure if that is something that WinInet can be configured to do, or if it is necessary for the app to read the 302 response and issue a fresh GET request.
Maciej Stachowiak
Comment 4 2006-11-05 19:22:15 PST
Comment on attachment 11050 [details] patch r=me I'll commit this.
Maciej Stachowiak
Comment 5 2006-11-05 19:22:53 PST
Committed.
Note You need to log in before you can comment on or make changes to this bug.