View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0002649 | mantisbt | security | public | 2002-10-22 14:47 | 2003-12-13 04:50 |
| Reporter | Assigned To | jfitzell | |||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | closed | Resolution | fixed | ||
| Platform | x86 | OS | Windows 2000 | ||
| Product Version | 0.17.5 | ||||
| Summary | 0002649: Login not working if Mantis is on a frame. IE6 bug? | ||||
| Description | Hi, I've installed Mantis, and it worked beatifully. Now Im trying to integrate Mantis into an intranet, which basically is a frameset: top frame is a menu, bottom is whichever app you select from the menu. Mantis is one of several menu options. Im getting some funny behaviour logging in when Mantis opens in the bottom frame with IE6. You click the menu link to Mantis, the login page loads, you enter username/password, submit and you get the same login page back, no errors, just the blank form back again. Also in IE6, if instead of loading Mantis in the bottom frame, you open it in a new window, it works perfectly. All this this works great if you use Opera 6, Netscape 4.7+, IE 5.5. But its not working with IE6. | ||||
| Steps To Reproduce | if you want to, I can send you the frameset. | ||||
| Additional Information | you can contact me at <a href="mailto:error@paginar.net" target="_new">error@paginar.net</a> | ||||
| Tags | No tags attached. | ||||
|
I've confirmed this bug exists |
|
|
Here's a MS knowledge base article on this issue: <a href="http://support.microsoft.com/default.aspx?scid=kb;en-us;Q323752">http://support.microsoft.com/default.aspx?scid=kb;en-us;Q323752</a> I'm not sure if there's any easy solution we can provide but maybe we can add something to the README about it or something... |
|
|
Ok, I'm committing some code that will help you solve this. I've added a custom_headers config variable that is an array of headers to send with each page request. So, you can check the link in my previous bugnote to determine your policy and then add that header in your config file. For example, I tried: $g_custom_headers[] = 'P3P: CP="CUR ADM"'; and that worked fine. I find the W3 paper on P3P a bit confusing though so I make no guarantees that that is a correct policy. |
|
|
MantisBT: master de491780 2002-10-26 19:26 Julian Fitzell Details Diff |
Add a custom_headers config option to provide a list of headers to include with each HTTP response. This was added to allow a solution to issue 0002649 (mantisbt.sourceforge.net/mantis/view_bug_advanced_page.php?f_id=0002649) git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@1591 <a class="text" href="/?p=mantisbt.git;a=object;h=f5dc347c">f5dc347c</a>-c33d-0410-90a0-b07cc1902cb9 |
Affected Issues 0002649 |
|
| mod - core/API.php | Diff File | ||
| mod - config_defaults_inc.php | Diff File | ||
| mod - doc/ChangeLog | Diff File | ||