Priority: Urgent
Current State: Closed
Released In: 1.1.3
Target Release: patch
Applies To: Engine
Component:
Branches:
login.tmpl defines:
<form action='%SCRIPTURLPATH{"login"}%%PATH_INFO%' name='loginform' method='post' onsubmit='document.loginform.foswiki_origin.value+=window.location.hash'>
This appends the fragment from the url used to render the login form (not quite sure why, but presumably this is part of an attempt to maintain the fragment through a login sequence).
Unfortunately, if the foswiki_origin includes a parameter string, this ends up polluting the parameter string.
Given that the correct parameter values are expanded into hidden form fields anyway, the parameter string is redundant.
Copy-paste the following to a trunk/1.1.2 install to reproduce:
Starting from logged out state, click <a href="%SCRIPTURL{viewauth}%/%WEB%/%TOPIC%?blah=trueblah#target">here</a>
After you log in the value of blah will include the target
* blah: %URLPARAM{"blah"}%
--
CrawfordCurrie - 25 Feb 2011