Failed logon leads to invalid action

Bug #686397 reported by James Jesudason
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Odoo Web Client
Invalid
Undecided
Unassigned

Bug Description

If a user attempts to login at the /openerp/login page and enters an incorrect username or password, the user gets redirected to the following url:

    /openerp/login?action=login&message=Bad+username+or+password&db=pilot&user=admin

If the user successfully logins in at that URL, then they get a page of errors due to that "action=login" parameter being in the URL. Included in the error messages is the user's username and password in clear text. The actual error that is generated is:

<type 'exceptions.TypeError'>: index() got an unexpected keyword argument 'action'
      args = ("index() got an unexpected keyword argument 'action'",)
      message = "index() got an unexpected keyword argument 'action'"

Version: 6.0 rc1

security vulnerability: yes → no
visibility: private → public
Revision history for this message
Somesh Khare (somesh.khare) wrote :

Hello,

I have checked the issue with the latest code on my end and it works fine. Would you please check the issue again with the latest code.

I am closing this bug for the sake of clarity in launchpad. If problem will still persists at your end then you can reopen this bug.

Thanks.

Changed in openobject-client-web:
status: New → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.