ucla/mwf — Issue #45: DTS infinite loop edge case
Author: Trott
Created: 2011-12-22 18:21:30+00:00
State: open

Set up a server called, say, login.proxy.library.ucla.edu.

Serve up a page in docroot called, say, menu.htm.

Assume that the end user might access it through HTTPS or might access it through HTTP, so you have code like this:

Assume mobile.library.ucla.edu is a CNAME for m.ucla.edu.

Because of the different mobile.library.ucla.edu vs. m.ucla.edu hostnames, `vars.php` will alternately see and not see the m.ucla.edu cookies (depending on if it is being pulled in via http://login.proxy.library.ucsf.edu/menu.htm of via http://mobile.library.ucla.edu/assets/js.php).

The end result is an infinite redirect loop.