Re: Invalid Referer

On Wed, 15 Aug 2018 11:14:57 -0400 "John P. Rouillard" <[email protected]> wrote:

> >Yes, I had /roundup/support/ (in 1.5.1), changing it to full URL helped.
> >Why I had it so -
> > https://sourceforge.net/p/roundup/mailman/roundup-users/?viewmonth=201512
> 
> Ok, that patch is not in roundup 1.6.0. So that explains it.  It also
> confirms my expectation that that URL is supposed to be absolute.
> 
> These days http is discouraged especially if there is
> login/authentication involved.
> 
> What is your use case for supporting both http and https?

IE on Windows XP and 2003 does not support SNI in https, but nowadays
it probably does not matter anymore.

> >It's probably worth mentioning in upgrading docs that templates should
> >preferably be updated too.
> 
> If you were using the default templates without any changes, you can
> copy in the new default templates from the distribution.
> 
> I didn't expect many people would run with the default tracker
> templates.
> 
> The upgrading directions provide the instructions on how to upgrade
> the existing tracker templates so they have the same features/changes
> as the 1.6.0 distributed templates.
> 
> Some template changes are required (e.g. Login from a search or after
> logout works better), while some are optional (e.g. Option to make
> adding multiple keywords more convenient). So the tracker admins can
> pick and choose which optional template changes they want to use.

IMHO it would still be worth mentioning template upgrading in a section
about @csrf, but it's up to you.

Regards,
Nerijus

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot