Patch #26604


Set a random name attribute on all forms to prevent overwritten values after soft reload with Firefox

Added by Holger Just almost 6 years ago. Updated almost 4 years ago.

Target version:
Start date:
Due date:
% Done:


Estimated time:


Given the following flow with each of the users using the Firefox browser:

  • User A opens issue 42 (for viewing, the issue edit form is already rendered hidden)
  • User B opens issue 42 and changes the version field (or any other select box)
  • User A becomes aware of the change (e.g. via notification mails) and soft-reloads the issue view (F5 in Windows)
  • User A adds an issue note.

With the last update of User A, they inadvertently also update the Version field back to the value it had when User A first loaded the issue in step 1. The cause of this is a peculiarity of how Firefox handles changes on forms with soft reloads. This is described on What happens here is that Firefox ignores the changed selected value on select box and always retains the value it had on first load, even if the value was never actually changed by the user.

Unfortunately, this results in unwanted behaviour of the issue form (and possibly all other forms using select boxes like the project or admin settings). If users are not very carefully, they might inadvertently overwrite values. This problem is not really detectable on the server since the values sent by Firefox are valid. Here, it looks like the user just changed the value back.

After a couple of tests, it appears that Firefox takes the name attribute of a form tag into account to detect values of existing forms on reload. If the name value changes, firefox doesn't take any changed values into account and assumes that the newly loaded form is completely different. The attached patch leverages this behaviour by adding a random name attribute to all rendered forms. For Firefox, this results in no form values being preserved on reload. Since Redmine already asks for confirmation on leave, this isn't much of a loss probably.

The name attribute does not appear to be actually used for anything else and is thus save to be used here. Still, we preserve any explicitly set name attribute.


Actions #1

Updated by Jan from Planio almost 6 years ago

  • Target version set to Candidate for next minor release
Actions #2

Updated by Toshi MARUYAMA almost 6 years ago

  • Target version changed from Candidate for next minor release to 4.1.0
Actions #3

Updated by Jean-Philippe Lang almost 4 years ago

  • Status changed from New to Closed
  • Assignee set to Jean-Philippe Lang

Committed, thanks.


Also available in: Atom PDF