Edge cannot use "post" to submit a form to an untrusted https service

Issue #7571345 • Assigned to Rajat J.

Details

Created
May 16, 2016
Privacy
This issue is public.
Found in
  • Microsoft Edge
Reports
Reported by 1 person

Sign in to watch or report this issue.

Steps to reproduce

  1. Install one service with CA license file.(The service can process post request and then redirect to another url)
  2. Don’t import public key into local environment and then use Edge to open the following html.
    <html>
    <head><meta http-equiv="cache-control" content="no-cache" /><meta http-equiv="pragma" content="no-cache" /></head>
    <body onload="document.forms[0].submit()“>
    <p>
    <script language="javascript">document.write(“Please wait …”);</script>
    </p>
    <noscript><p>Note: Your browser does not support JavaScript or it is turned off. Press the button to proceed.</p></noscript>
    <form method="post” action="https://ip:port/serviceurl" >
    <input type="hidden" name="SAMLRequest" value="PEFMDAxLzA0L3htbGVuYyMiIHhtb"/>
    <input type="hidden" name="RelayState" value="ROLE_SBO"/>
    <noscript><input type="submit" value="Continue"/></noscript></form>
    </body>

</html>

Expected results:
Edge will show warning to users and then users click on continue to this page. Then service can receive the post request and can process the request.
Actual results:
post body info are not sent to server service and Edge browser shows blank page.

Attachments

0 attachments

    Comments and activity

    • When I import corresponding CA license file into system, then Edge can process the post request and working normally.

    • This works in all other major browsers.

    • While I use “GET” or “PUT” in the form, the service can receive the request and process it.

    • If you use debug command, and refresh the url for several times, it may work, but most time in debug mode, it doesn’t work. If you don’t open debug command, it will reproduce.

    • Microsoft Edge Team

      Changed Assigned To to “Brad E.”

      Changed Assigned To to “Venkat K.”

      Changed Assigned To from “Venkat K.” to “Rajat J.”

    You need to sign in to your Microsoft account to add a comment.

    Sign in