Internet Explorer double-submit bug

26 Mar 2009 by Dan,

iesecurity

Internet Explorer security warning

While testing a new feature tonight, I stumbled upon a very unusual and annoying Internet Explorer bug.

I have an ASP.NET page with a form on it, when that form is submitted the result is a redirect to another website. The website that I am being redirected to has an invalid SSL certificate and it causes a warning to come up in Internet Explorer. The bug is that when you click to allow the security error it re-submits the form. That means your form gets submitted twice. Data might be stored twice, it might mess up your conversion rate tracking, etc.  I have not tested this with a non-ASP.NET page yet but I suspect the platform doesn’t matter. As long as the result of your form submission is a server-side redirect you will probably experience this bug.

I have only seen this behavior in Internet Explorer 7 and 8, the same form works fine in Firefox, Chrome and Safari. The good news is that this is easy to fix: Don’t redirect to an insecure domain.

4 Comments

  1. Brian Plourde says:

    Was it self-signed, revoked/suspended, or simply an expired cert? Interesting bug you’ve identified but and i’d be interested to see if it’s driven by a specific status. Your last sentence saved you from me responding with a nasty comment about you intentionally redirecting to an invalid certificate to begin with :)

  2. Dan says:

    It was a certificate mis-match. We were accessing an application at “test.domain.com” on a server that was signed to “test.otherdomain.com”. I have not tested this with a revoked/suspended certificate, I suspect the behavior is the same so long as IE issues that same warning.

  3. Anonymous says:

    Здравствуйте, хотелось бы показать на ваш обзор дневник посвященный автомобильной тематике! Здесь вы сможете найти решения на все взбудораживающие ваши вопросы!!!

  4. Anonymous says:

    Привет, хотелось бы представить на ваш обзор сайт посвященный автомобильной тематике! Здесь вы сможете отыскать решения на все волнующие ваши вопросы!!!

Leave a Reply

More from Dan

Follow Me! Follow Me! Follow Me! Follow Me!
 
 
The Website Grade for www.abdinoor.com!