I tried a fresh profile and re-installed firebug and yslow. At first I didn't see the problem and thought that fixed it but that was because I hadn't told yslow to autorun. When I either have yslow autorun or if i manually run a yslow test and the Activate Same Origin URLs is turned on in Firebug then yslow calls the URL that resulted in the page load. Since this is the login URL and it is being called without any parameters it is logging me out.
I suppose this is a yslow issue since it appears to be making the request as part of one of its tests but it seems to be getting the URL based on the Firebug "Activate Same Origin URLs" being checked. I may just make a filter on my application that ignores GET requests to the login URL so that this doesn't bite developers down the road. Hopefully application users won't be accessing the site with firebug and yslow up and running. On Dec 14, 1:32 am, John J Barton <[email protected]> wrote: > On Dec 13, 5:10 pm, Hal Deadman <[email protected]> wrote: > > > > > > > Firefox 3.5.5 > > Firebug 1.4.5 > > Yslow 2.0.2 > > Firebug Options -> Activate Same Origin Urls -> Enabled > > > I had an issue using the above combination of settings where every > > time I logged into the web application I was working on, a few seconds > > later there would be a request to the login URL where it was invoked > > with a GET and no arguments (username & password) and the effect was > > to log me back out (which would become apparent on the next request). > > I am working on a web application using Spring-Security so the submit > > URL was /xxx/j_spring_security_check. The problem only occurred when I > > actually had Firebug enabled and running, yslow enabled, and the > > "Activate Same Origin URLs" checked. > > > I ran into this problem on Friday and it bugged me all weekend. I knew > > the problem was only happening in Firefox and eventually I thought > > maybe it was an extension so I disabled them all and the problem > > stopped. Then I re-enabled plugins to figure out which ones were > > responsible. The problem doesn't occur unless both yslow and firebug > > are enabled and running for the domain I am accessing. If I turn off > > "Activate Same Origin Urls" then the problem stops. > > > I am not sure I understand what "Activate Same Origin Urls" is doing > > If you have a page x.foo.com open, the Activate Same Origin Urls > option causes Firebug to activate any other page you open on > *.foo.com. The option does not cause any GET. As far as I am aware, > Firebug currently does no network activity to a debugged site. > > You might try a new Firefox profile. This fixes a lot of weird cases. > > jjb -- You received this message because you are subscribed to the Google Groups "Firebug" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/firebug?hl=en.
