Details
-
Bug
-
Resolution: Fixed
-
Blocker
-
14.10.18, 15.9
-
Unknown
-
N/A
-
N/A
-
Description
Reproduction steps:
- Create a fresh wiki
- Login with Admin and setup the right to prevent unregistered users to view it and to allow guest user to use it
- Log out
- Click on the top right area to open the drawer and click on register
- Ensure that the URL doesn't contain a xredirect parameter: if it's the case, remove the parameter and reload
- Fill the form and put 2 different passwords
- Click on Register button
Expected result:
- Ideally the click on Register should not send the form and the javascript validation should show immediately that the two passwords are not identical
- Even if javascript validation does not work, once the form is submitted the user should see that the registration did not work because of the 2 passwords not identical
Obtained result:
- The user is immediately redirected to the login form, there's no indication whether the registration worked or not
Attachments
Issue Links
- is caused by
-
XWIKI-19291 XSS in register page when guest users don't have view rights
- Closed
- is related to
-
XWIKI-21444 Registration configuration not properly taken into account in close wiki
- Closed