When arriving to
/node/NODE_NUM/submission/SUBMISSION_NUM/delete
from
/node/NODE_NUM/submission/SUBMISSION_NUM

there is no query concatenated to the destination. Therefore, if user clicks on Cancel the destination is
/node/NODE_NUM/webform-results
instead of
/node/NODE_NUM/submission/SUBMISSION_NUM

CommentFileSizeAuthor
#2 webform_delete_redirect2.patch1.13 KBquicksketch
#2 webform_delete_redirect3.patch1.21 KBquicksketch

Comments

quicksketch’s picture

quicksketch
he/him
commented

Thanks, a good report.

quicksketch’s picture

quicksketch
he/him
commented
Version: 6.x-2.6 » 6.x-2.9
Status: Active » Fixed
StatusFileSize
new webform_delete_redirect3.patch1.21 KB
new webform_delete_redirect2.patch1.13 KB

I've committed the attached patches. Note that the 3.x version was less affected by this than 2.x, since it includes more extensive fixes by passing long a "destination" parameter more frequently than 2.x does. Either way, this should at least prevent access denied errors.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.