[
http://jira.xwiki.org/jira/browse/XWIKI-1655?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergiu Dumitriu closed XWIKI-1655.
----------------------------------
Resolution: Fixed
Assignee: Sergiu Dumitriu
Fixed in rev. 7896
The fix causes all the cookies named "username", "password", "rememberme" and
"validation" to be deleted for the current domain and all it's parent domains,
until only one dot remains in the domain (cookies cannot be set for all TLDs,
like the entire .com, for example). This can cause problems with shared
hosting, like logging in/out of XWiki can invalidate the authentication for
other applications, if those applications use cookies set at a common domain
prefix.
> login action should clean all the cookies
> -----------------------------------------
>
> Key: XWIKI-1655
> URL: http://jira.xwiki.org/jira/browse/XWIKI-1655
> Project: XWiki Core
> Issue Type: Improvement
> Components: Actions and URLs
> Affects Versions: 1.1 M4
> Reporter: Sergiu Dumitriu
> Assigned To: Sergiu Dumitriu
> Priority: Critical
> Fix For: 1.3 RC1
>
>
> There are some login-related issues caused by cookies (see XE-91 ), caused by
> the fact that different versions of XWiki use cookies differently.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.xwiki.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
_______________________________________________
notifications mailing list
[email protected]
http://lists.xwiki.org/mailman/listinfo/notifications
