Package: lynx-ssl
Version: 2.8.4.1b-3
Severity: normal

If the document served by a POST action contains a normal link to the
same URL that was POSTed to, then on following the link Lynx will repeat
the POST instead of doing the GET that it should.  I encountered this
bug while attempting to report a bug in Mutt's Gnats database, so here's
the recipe to reproduce it and demonstrate the envelope:

0. lynx http://bugs.mutt.org
1. In the login form, fill in username "guest" and password "guest".
2. Submit login form, thus POSTing to
   <http://bugs.mutt.org/cgi-bin/Gnatsweb.pl?database=mutt>.
3. Accept two cookies.
4. Observe that the new page contains an ordinary link to
   <http://bugs.mutt.org/cgi-bin/Gnatsweb.pl?database=mutt>, the very
   same URL, and invites you to follow it.
5. Follow the link.  At this point you're supposed to get the Gnats main
   page, but instead you get the same page again.
6. Edit the URL of the current page, adding "&a=b" on the end.
   This yields the Gnats page as it's supposed to.
7. Edit the URL again, removing the "&a=b" to bring it back to what it
   was before.  This now works, yielding the Gnats page again.

-zefram


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to