There is 1 comment.
 
 
XWiki Platform / cid:jira-generated-image-avatar-aab6f67c-6f8f-430b-9178-30381f443157 XWIKI-17873 Open

Infinite loop created by a robot constantly clicking on login or register link

 
View issue   ยท   Add comment
 

1 comment

 
cid:jira-generated-image-avatar-c244ae29-43d1-4c92-8fcb-5296bc080390 Antoine Mottier on 23/Sep/24 15:41
 

I'm wondering if, reusing existing value of xredirect, if already defined would be a valid solution to this issue?
A patch (here only for "log-in" link, same solution might need to be replicated at least for "register") might look like:

## If xredirect is not already set
#if (!$request.xredirect)
  ## Define xredirect value using current document relative request URL
  <a href="$xwiki.getURL('XWiki.XWikiLogin', 'login', "xredirect=$escapetool.url($xwiki.relativeRequestURL)&loginLink=1")" id="tmLogin" rel="nofollow">$services.icon.renderHTML('log-in') $escapetool.xml($services.localization.render('login'))</a>
## If xredirect is already set
#else
  ## Reuse the current value in the login link
  <a href="$xwiki.getURL('XWiki.XWikiLogin', 'login', "xredirect=$escapetool.url($request.xredirect)&loginLink=1")" id="tmLogin" rel="nofollow">$services.icon.renderHTML('log-in') $escapetool.xml($services.localization.render('login'))</a>
#end