Details
-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
17.4.0
-
None
-
Unknown
-
Description
Currently, it relies (or more accurately XWikiAction#execute relies) on an explicit "?ajax=true" request parameter, but that's obviously not the definition of an ajax request, and it would be better to use a more reliable criterion.
For example, MichaelHamann suggested checking the presence of the request header XWiki-Form-Token, which is automatically added to every same-origin ajax requests since 14.10.8.
Attachments
Issue Links
- relates to
-
OIDC-234 The authenticator should not redirect in the case of an ajax request
-
- Closed
-