Damien Accorsi wrote:
> Damien Accorsi wrote:
>   
>> Diez B. Roggisch wrote:
>>     
>>> Sounds a bit strange. Redirect usually preserves the protocol & host,
>>> simply because it only redirects to the path.
>>>
>>> How exactly do you use redirect ?
>>>       
>> I uses it the "normal" way: I have an url which is in charge of
>> validating a form, then go back to the previous page. "but"... I'll
>> check tomorrow : I maybe don't use tg.url to create my redirect url.
>>
>> Damien
>>     
> Here is the way I use redirect:
>
> from tg import expose, flash, require, url, request, redirect, validate
> [...]
>   @expose()
>   @require(predicates.has_permission('AddIpAddress'))
>   def add_ip_address(self, new_ip_address, new_ip_address_comment="",
> came_from='/home', x=0, y=0):
>     [...]
>     redirect(came_from)
>
>
>
> Note: the form calling this controller action is like(no 'came_from' var
> defined):
>
> <form action="/action/add_ip_address">
>   ...
> </form>
>   
Ok. I did some extra tests. All the links are working well with HTTPS.
The only problem comes from redirect.

Here is the code I used to process my tests: http://paste.debian.net/56357/

When calling the /action/change url through HTTPS, my browser is
redirected to /action/agaga through HTTP.
When calling the /action/agaga url through HTTPS, I get a link to
/action/change through HTTPS.

I tried to analyse the HTTP/HTTPS queries using wireshark but HTTPS is
encrpyted so I didn't see the content of the HTTPS data :-/

Any Idea ? Nobody's working with redirect on some secured website
(e-commerce for example ?) ?

Damien


--
You received this message because you are subscribed to the Google Groups "TurboGears" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to [email protected].
For more options, visit this group at http://groups.google.com/group/turbogears?hl=en.

Reply via email to