`redirect_to` should issue a 303 status if redirecting away from a POST.

Well, no browsers seem to actually issue the POST request, so there's not really a problem here.

Is 303 supported by all the major browsers?

Firefox issues the POST request. 303 is specified in HTTP/1.1, so I'd say virtually all browsers in use today support 303.

Would you care to provide a patch for this? 302 and 303 isn't particularly well enforced by browsers so I wouldn't expect this would become a priority.

If the 302 status code is received in response to a request other than GET or HEAD, the user agent MUST NOT automatically redirect the request unless it can be confirmed by the user, since this might change the conditions under which the request was issued.

Michael, I'll give it a shot.

I'm unable to recreate that Firefox should ask for verification after redirect on a POST. Which version are you seeing this on? 1.0.4 here.

I just tried it with a recent Instiki-AR build in Firefox 1.0.6 on Tiger, and it didn't do that. However when I posted this report I was running on Ubuntu and it did request verification (normal scaffolded action). The specific application isn't running anymore though, so I can't easily reproduce this.

It appears to me that IE6.0 is issuing a POST request. I get all the normal messages from the browser that one would expect in this case. There is solid discussion of this topic at http://www.megginson.com/blogs/quoderat/archives/2006/05/31/firefox-vs-prg/ with a test at http://www.megginson.com/test/prg/prg-test.html, although to test in IE, you must save the page to your harddrive and replace the form action url with http://www.megginson.com/test/prg/do-prg-test.php and change the <button>submit</button> line with <input type="submit"/>. Once you do this, you will see that IE issues no posts and no complaints when you back up to the form. This is b/c he is using 303. With 302 as rails is currently using, I get all sorts of complaints when I back up to my form.

I've been testing for a while now and I can't reproduce this either on IE 6.0.26 or IE SP2. Both issue a GET after a form post redirect regardless of the response code:

303

Processing SessionsController#create (for 64.151.100.71 at 2007-01-18 23:19:29) [POST]
  Session ID: 39baba7b246d121cf7cc2a8a094b0f32
  Parameters: {...}
Redirected to http://***/
Completed in 0.00954 (104 reqs/sec) | DB: 0.00411 (43%) | 303 See Other [https://***/sessions]


Processing EntriesController#index (for 64.151.100.71 at 2007-01-18 23:19:29) [GET]
  Session ID: 39baba7b246d121cf7cc2a8a094b0f32
  Parameters: {"action"=>"index", "controller"=>"entries"}
Rendering  within layouts/application
Rendering entries/index
Completed in 0.97636 (1 reqs/sec) | Rendering: 0.20272 (20%) | DB: 0.55385 (56%) | 200 OK [https://***/]

302

Processing FlagsController#create (for 10.10.15.1 at 2007-01-18 23:20:19) [POST]
  Session ID: 39baba7b246d121cf7cc2a8a094b0f32
  Parameters: {"commit"=>"Flag It", "return_to"=>"/entries/59", "action"=>"create", "flag"=>{"type_id"=>"8
", "reason"=>""}, "flaggable_id"=>"59", "controller"=>"flags", "flaggable_type"=>"Entry"}
Redirected to http://***/entries/59
Completed in 0.07108 (14 reqs/sec) | DB: 0.06113 (86%) | 302 Found [http://***/flags]


Processing EntriesController#show (for 10.10.15.1 at 2007-01-18 23:20:20) [GET]
  Session ID: 39baba7b246d121cf7cc2a8a094b0f32
  Parameters: {"action"=>"show", "id"=>"59", "controller"=>"entries"}
Rendering  within layouts/application
Rendering entries/show
Completed in 0.14381 (6 reqs/sec) | Rendering: 0.03949 (27%) | DB: 0.09513 (66%) | 200 OK [http://***/entries/59]

Closing stale ticket.