[
https://issues.apache.org/jira/browse/JSPWIKI-816?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18135784#comment-18135784
]
Arturo Bernal commented on JSPWIKI-816:
---------------------------------------
A pull request is open: https://github.com/apache/jspwiki/pull/562. After a new
profile is saved from the login page with an empty redirect parameter,
Login.jsp built the view URL of Login.jsp itself and, as the user was already
authenticated, answered Forbidden; the log had 'Illegal page name'. The saved
profile branch now goes to the front page when the page of the redirect
parameter does not exist, as the login branch already did.
Measured in Chrome on a Tomcat 10.1 instance: before, the registration ended on
Login.jsp?redirect= with the Forbidden page; with the war of the branch it ends
on the front page.
Not covered: there is no automated test, I set the redirect field empty by hand
and did not find which links of the templates give an empty value in a real
use, and the mail of the registration failed in my instance because it has no
mail server.
> Error page on jspwiki-wiki.a.o after successful signup
> ------------------------------------------------------
>
> Key: JSPWIKI-816
> URL: https://issues.apache.org/jira/browse/JSPWIKI-816
> Project: JSPWiki
> Issue Type: Bug
> Components: Documentation & website
> Affects Versions: 2.10
> Reporter: Florian Holeczek
> Priority: Minor
> Labels: pull-request-available
>
> Signing up to the new JSPWiki wiki apparently worked, but I received an Error
> Page right after sending the registration form:
> URL: https://jspwiki-wiki.apache.org/Login.jsp?redirect=
> Page content:
> {quote}
> Forbidden
> Sorry, but you are not allowed to do that.
> Usually we block access to something because you do not have the correct
> privileges (e.g., read, edit, comment) for the page you are looking for. In
> this particular case, it is likely that you are not listed in the page’s
> access control list or that your privileges aren’t high enough (you want to
> edit, but ACL only allows ‘read’).
> It is also possible that JSPWiki cannot find its security policy, or that the
> policy is not configured correctly. Either of these cases would cause JSPWiki
> to block access, too.
> Better luck next time.
> {quote}
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
