New bug report

master
http://mjr.towers.org.uk/ 2008-11-06 09:27:47 -05:00 committed by Joey Hess
parent 256b3aeba8
commit 81846ef42e
1 changed files with 5 additions and 0 deletions

View File

@ -0,0 +1,5 @@
At the moment, you go through the login shuffle and then are told that cookies are needed, so you lose all your data and login again. It would be much slicker to note by the edit link, or at least on the login page, that cookies are required.
Even better would be to only display the cookie note as a warning if the login page doesn't receive a session cookie.
Best of all would be to use URL-based or hidden-field-based session tokens if cookies are not permitted.