The self-check module should use use POST for logouts instead of GET.
Created attachment 183443 [details] [review] Bug 40224: Replace use of location.href with POST logout form The self-check module should use use POST for logouts instead of GET. Test Plan: 1) Enable WebBasedSelfCheck and SelfCheckInModule 2) Set SelfCheckTimeout and SelfCheckInTimeout to 10 seconds 3) Log in to each, observer the page is logged out after 10 seconds with not "op=logout" in the URL. Wait another 10 seconds, observe the page again refreshes with no "op=logout" in the URL.
Just checking if this is ready for sign off yet.
I'm concerned about issues with Bug 36586