aboutsummaryrefslogtreecommitdiffstats
path: root/actionpack/lib/action_controller/metal/http_authentication.rb
diff options
context:
space:
mode:
authorAndrew White <andyw@pixeltrix.co.uk>2012-04-30 06:37:19 +0100
committerAndrew White <andyw@pixeltrix.co.uk>2012-04-30 06:59:15 +0100
commita72fe84d00724ccb6d60f82ce90e36a8c0f1c1ae (patch)
tree1cacc553752d28822a8ac9df8a62d3f6db77d850 /actionpack/lib/action_controller/metal/http_authentication.rb
parent8fec5d7657fd177bda558c2f47998e20db407a38 (diff)
downloadrails-a72fe84d00724ccb6d60f82ce90e36a8c0f1c1ae.tar.gz
rails-a72fe84d00724ccb6d60f82ce90e36a8c0f1c1ae.tar.bz2
rails-a72fe84d00724ccb6d60f82ce90e36a8c0f1c1ae.zip
Add note about using 303 See Other for XHR requests other than GET/POST
IE since version 6 and recently Chrome and Firefox have started following 302 redirects from XHR requests other than GET/POST using the original request method. This can lead to DELETE requests being redirected amongst other things. Although it doesn't directly affect the Rails framework since it doesn't return a 302 redirect to any non-GET/POST request a note has been added to raise awareness of the issue. Some references: Original article from @technoweenie: http://techno-weenie.net/2011/8/19/ie9-deletes-stuff/ Hacker News discussion of the article: http://news.ycombinator.com/item?id=2903493 WebKit bug report: https://bugs.webkit.org/show_bug.cgi?id=46183 Firefox bug report and changeset: https://bugzilla.mozilla.org/show_bug.cgi?id=598304 https://hg.mozilla.org/mozilla-central/rev/9525d7e2d20d Chrome bug report: http://code.google.com/p/chromium/issues/detail?id=56373 HTTPbis bug report and changeset: http://trac.tools.ietf.org/wg/httpbis/trac/ticket/160 http://trac.tools.ietf.org/wg/httpbis/trac/changeset/1428 Roy T. Fielding's history of the issue: http://ftp.ics.uci.edu/pub/ietf/http/hypermail/1997q3/0611.html Automated browser tests for the issue: http://www.mnot.net/javascript/xmlhttprequest/ Fixes #4144 (cherry picked from commit 24f143789a8989f3bccde14ff28067de25cafd87)
Diffstat (limited to 'actionpack/lib/action_controller/metal/http_authentication.rb')
0 files changed, 0 insertions, 0 deletions