SAP uses the following code for logging out: var agt=navigator.userAgent.toLowerCase(); if (agt.indexOf("msie") != -1) { document.execCommand( "ClearAuthenticationCache" ); } else { var xmlhttp = createXMLObject(); xmlhttp.open("GET", "Logoff.htm", true, "logout", "logout"); xmlhttp.send(""); xmlhttp.abort(); } This works quite differently in IE and in Firefox, but lets one log out securely. We should make the Firefox version work in WebKit (again?). See <https://bugzilla.mozilla.org/show_bug.cgi?id=287957> for some related discussion. <rdar://problem/6447115>
Created attachment 40964 [details] proposed fix
Comment on attachment 40964 [details] proposed fix Fun time. r=me
Fun times*, even
Committed <http://trac.webkit.org/changeset/49406>.
Follow-up <http://trac.webkit.org/changeset/49410>.