lua-users home
lua-l archive

[Date Prev][Date Next][Thread Prev][Thread Next] [Date Index] [Thread Index]


On May 27, 2010, at 3:26 PM, Romulo wrote:

>> According to the RFC anyway, POST should not be automatically redirected without interactive user confirmation.
> 
> According to [1], the 302 status code should not redirect a POST
> without user confirmation, you should use 303 See Other to do that.

Right. In practice though, most user agents choose to ignore that part of the spec, as noted in the spec itself :)

"Note: RFC 1945 and RFC 2068 specify that the client is not allowed
to change the method on the redirected request.  However, most
existing user agent implementations treat 302 as if it were a 303
response, performing a GET on the Location field-value regardless
of the original request method. The status codes 303 and 307 have
been added for servers that wish to make unambiguously clear which
kind of reaction is expected of the client."

http://en.wikipedia.org/wiki/Post/Redirect/Get

Bit old, but still:

http://www.alanflavell.org.uk/www/post-redirect.html