Changes between Initial Version and Version 1 of Ticket #10491, comment 11
- Timestamp:
- Dec 8, 2011, 5:55:28 PM (12 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
Ticket #10491, comment 11
initial v1 10 10 - Location is `https://www.google.com/accounts/o8/ud?openid.assoc_handle=xxxxxxx&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.realm=http%3A%2F%2Fsupport.mayfirst.org%2F&openid.return_to=http%3A%2F%2Fsupport.mayfirst.org%2Flogin%3F` **`referer%3Dhttps%253A%252F%252Fsupport.mayfirst.org%252F`**`%26openid_identifier%3Dhttps%253A%252F%252Fwww.google.com%252Faccounts%252Fo8%252Fid%253Fnext%253D%252F%26modauthopenid.nonce%3DyXesHM8xhe%26` **`referer%3Dhttps%253A%252F%252Fsupport.mayfirst.org%252F`**`&openid.trust_root=http%3A%2F%2Fsupport.mayfirst.org%2F` 11 11 12 So it's really the second hypothesis, the Referer header doesn't matter and we see that the on-openid parameters get duplicated (here its only `referer`, but you could easily check by adding `<input type="hidden" name="dummy" value="xyz" /> ` to your form).12 So it's really the second hypothesis, the Referer header doesn't matter and we see that the non-openid parameters get duplicated (here its only `referer`, but you could easily check by adding `<input type="hidden" name="dummy" value="xyz" /> ` to your form).