Edgewall Software

Changes between Initial Version and Version 1 of Ticket #10491, comment 11


Ignore:
Timestamp:
Dec 8, 2011, 5:55:28 PM (12 years ago)
Author:
Christian Boos

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #10491, comment 11

    initial v1  
    1010 - Location is `https://www.google.com/accounts/o8/ud?openid.assoc_handle=xxxxxxx&openid.claimed_id=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.identity=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%2Fidentifier_select&openid.mode=checkid_setup&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.realm=http%3A%2F%2Fsupport.mayfirst.org%2F&openid.return_to=http%3A%2F%2Fsupport.mayfirst.org%2Flogin%3F` **`referer%3Dhttps%253A%252F%252Fsupport.mayfirst.org%252F`**`%26openid_identifier%3Dhttps%253A%252F%252Fwww.google.com%252Faccounts%252Fo8%252Fid%253Fnext%253D%252F%26modauthopenid.nonce%3DyXesHM8xhe%26` **`referer%3Dhttps%253A%252F%252Fsupport.mayfirst.org%252F`**`&openid.trust_root=http%3A%2F%2Fsupport.mayfirst.org%2F`
    1111
    12 So it's really the second hypothesis, the Referer header doesn't matter and we see that the on-openid parameters get duplicated (here its only `referer`, but you could easily check by adding `<input type="hidden" name="dummy" value="xyz" /> ` to your form).
     12So it's really the second hypothesis, the Referer header doesn't matter and we see that the non-openid parameters get duplicated (here its only `referer`, but you could easily check by adding `<input type="hidden" name="dummy" value="xyz" /> ` to your form).