[Savannah-dev] [bug #3819] Wrong Location header breaks bookmarks

[nobody]

=================== BUG #3819: LATEST MODIFICATIONS ==================
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=3819&group_id=11

Changes by: Roland Mas <address@hidden>
Date: mer 27.08.2003 à 20:29 (Europe/Paris)

------------------ Additional Follow-up Comments ----------------------------
It seems to have changed sometime in the recent weeks.  It now sends the 
following:

Location: savannah.nongnu.org/account/login.php?return_to=%2Fmy%2F



...which is still broken, as the browser now tries to fetch 
https://savannah.nongnu.org/my/savannah.nongnu.org/account/login.php?return_to=%2Fmy%2F
 and fails, obviously.  At least it fails with a 404 and not with a "host 
account not found" message, but it still isn't satisfactory.



I humbly suggest that you just add https:// in front of the URL you return.  To 
the best of my knowledge and guesswork, that's all it would take to fix this 
bug.



=================== BUG #3819: FULL BUG SNAPSHOT ===================


Soumis par: lo-lan-do                 Projet: Savannah                      
Signalé le: ven 30.05.2003 à 11:41
Category:  Other                      Severity:  9 - Blocker                
Priority:  Normal                     Bug Group:  None                      
Resolution:  None                     Assigned to:  yeupou                  
Status:  Open                         Effort:  0.00                         

Summary:  Wrong Location header breaks bookmarks

Original Submission:  My browser bookmarks include 
"https://savannah.nongnu.org/my/";, so I can either go to my personal page or to 
the login page, which would then redirect me to my personal page.  That used to 
work, until a few weeks ago, where my browser complained that it couldn't reach 
"account".  A bit of investigation showed up this:



$ curl -D- https://savannah.nongnu.org/my/

HTTP/1.1 302 Found

Date: Fri, 30 May 2003 09:31:28 GMT

Server: Apache/1.3.26 Ben-SSL/1.48 (Unix) Debian GNU/Linux PHP/4.1.2

X-Powered-By: PHP/4.1.2

Location: //account/login.php?return_to=%2Fmy%2F

Transfer-Encoding: chunked

Content-Type: text/html; charset=iso-8859-1



In other words, the redirection (Location:) header contains a relative URI.  
That is broken, and against the RFC that defines HTTP 1.1 (see 
http://www.w3.org/Protocols/rfc2616/rfc2616-sec14.html#sec14.30 for the 
reference).



The header should be rewritten using an absolute URI, that includes a protocol 
and hostname.

Follow-up Comments
*******************

-------------------------------------------------------
Date: mer 27.08.2003 à 20:29        By: lo-lan-do
It seems to have changed sometime in the recent weeks.  It now sends the 
following:

Location: savannah.nongnu.org/account/login.php?return_to=%2Fmy%2F



...which is still broken, as the browser now tries to fetch 
https://savannah.nongnu.org/my/savannah.nongnu.org/account/login.php?return_to=%2Fmy%2F
 and fails, obviously.  At least it fails with a 404 and not with a "host 
account not found" message, but it still isn't satisfactory.



I humbly suggest that you just add https:// in front of the URL you return.  To 
the best of my knowledge and guesswork, that's all it would take to fix this 
bug.

-------------------------------------------------------
Date: lun 02.06.2003 à 14:43        By: yeupou
It's not a relative url (starting with a slash) but a broken url.


La liste CC est vide


Il n'y a aucun fichier attaché actuellement


For detailed info, follow this link:
http://savannah.gnu.org/bugs/?func=detailbug&bug_id=3819&group_id=11

_______________________________________________
  Message sent via/by Savannah
  http://savannah.gnu.org/