View Issue Details

IDProjectCategoryView StatusLast Update
0002649mantisbtsecuritypublic2003-12-13 04:50
ReporterreporterAssigned Tojfitzell  
PrioritynormalSeverityminorReproducibilityalways
Status closedResolutionfixed 
Platformx86OSWindows 2000 
Product Version0.17.5 
Summary0002649: Login not working if Mantis is on a frame. IE6 bug?
Description

Hi,

I've installed Mantis, and it worked beatifully.

Now Im trying to integrate Mantis into an intranet, which basically is a frameset: top frame is a menu, bottom is whichever app you select from the menu. Mantis is one of several menu options. Im getting some funny behaviour logging in when Mantis opens in the bottom frame with IE6.

You click the menu link to Mantis, the login page loads, you enter username/password, submit and you get the same login page back, no errors, just the blank form back again.
So you cant login.

Also in IE6, if instead of loading Mantis in the bottom frame, you open it in a new window, it works perfectly.

All this this works great if you use Opera 6, Netscape 4.7+, IE 5.5. But its not working with IE6.

Steps To Reproduce

if you want to, I can send you the frameset.

Additional Information

you can contact me at <a href="mailto:error@paginar.net" target="_new">error@paginar.net</a>

TagsNo tags attached.

Activities

jfitzell

jfitzell

2002-10-26 15:08

reporter   ~0003409

I've confirmed this bug exists

jfitzell

jfitzell

2002-10-26 15:23

reporter   ~0003410

Here's a MS knowledge base article on this issue:

<a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q323752">http://support.microsoft.com/default.aspx?scid=kb;en-us;Q323752</a>

I'm not sure if there's any easy solution we can provide but maybe we can add something to the README about it or something...

jfitzell

jfitzell

2002-10-26 16:26

reporter   ~0003411

Ok, I'm committing some code that will help you solve this.

I've added a custom_headers config variable that is an array of headers to send with each page request. So, you can check the link in my previous bugnote to determine your policy and then add that header in your config file.

For example, I tried:

$g_custom_headers[] = 'P3P: CP="CUR ADM"';

and that worked fine. I find the W3 paper on P3P a bit confusing though so I make no guarantees that that is a correct policy.

Related Changesets

MantisBT: master de491780

2002-10-26 19:26

Julian Fitzell


Details Diff
Add a custom_headers config option to provide a list of headers to include with each HTTP response. This was added to allow a solution to issue 0002649 (mantisbt.sourceforge.net/mantis/view_bug_advanced_page.php?f_id=0002649)

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1591 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9
Affected Issues
0002649
mod - core/API.php Diff File
mod - config_defaults_inc.php Diff File
mod - doc/ChangeLog Diff File