web/375: Re: GCC gnatsweb

[Martin v. Loewis]

>Number:         375
>Category:       web
>Synopsis:       GCC gnatsweb
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    gerald
>State:          analyzed
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Jul 03 15:46:00 PDT 2000
>Closed-Date:
>Last-Modified:
>Originator:     "Joseph S. Myers" <jsm28@cam.ac.uk>
>Release:        2.95.2
>Organization:
>Environment:
>Description:
 Date: Mon, 3 Jul 2000 13:17:12 +0100 (BST)
 Original-Message-ID: <Pine.SOL.4.21.0007031259200.23500-100000@orange.csi.cam.ac.uk>

 Attempting to search the GCC gnatsweb
 ( http://sourceware.cygnus.com/cgi-bin/gnatsweb.pl ) I noticed a few
 problems:

 * The login page makes no mention of needing to have cookies
 enabled; but without cookies enabled it just redirects to another login
 page (under Netscape) or goes to a "Redirecting" page which does nothing
 (under lynx).  The latter problem seems to be because it is trying to use
 an HTTP "Refresh" header, which is not mentioned in RFC 2616 (the HTTP 1.1
 spec), and also applies even if cookies are accepted.

 * Under lynx -cookies, after accepting two cookies, lynx then gives an
 error "Accept invalid cookie path=/cgi-bin/gnatsweb.pl as a prefix of
 '/cgi-bin'? (n)".  If this is indeed invalid, the gnatsweb should be
 fixed.

 * When using Netscape and accepting cookies it is possible to log in as
 guest, but then searching for category "c" also shows up bugs in category
 "c++".

 -- 
 Joseph S. Myers
 jsm28@cam.ac.uk

>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted: