Problem/Motivation

The securelogin module disallows to redirect POST requests, in order to prevent unintentional redirects.
For some usecases though, it would be great to also redirect POST requests, even, if this leads to lost data.

Proposed resolution

Remaining tasks

User interface changes

API changes

CommentFileSizeAuthor
#6 2454599.patch1.77 KBmfb

Comments

mfb’s picture

mfb
they or he
commented

I believe the right way to do this would be a 307 or 308 redirect.

  • mfb committed d25484e on 8.x-1.x 
    feature #2454599: Allow to redirect POST requests to https
mfb’s picture

mfb
they or he
commented
Version: 7.x-1.x-dev » 8.x-1.x-dev
Status: Active » Fixed

fixed in the d8 branch.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.

mfb’s picture

mfb
they or he
commented
Title: Allow to redirect POST requests to http; » Allow to redirect POST requests to https
mfb’s picture

mfb
they or he
commented
Version: 8.x-1.x-dev » 7.x-1.x-dev
Status: Closed (fixed) » Needs review
StatusFileSize
new 2454599.patch1.77 KB

We could also fix this on the d7 branch.

mfb’s picture

mfb
they or he
commented
Status: Needs review » Reviewed & tested by the community

A 308 redirect might fail in some older user agents however I think that's ok. This is not intended to be a commonly used "feature" because submitting passwords or other user data via HTTP is insecure.

  • mfb committed 670f392 on 7.x-1.x 
    Issue #2454599 by mfb: Redirect POST requests to HTTPS using 308 status...
mfb’s picture

mfb
they or he
commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.