Well, did some more testing on this, it seems related to the http_authentication plugin.

The redirection loop occurs with http_authentication plugin enabled and cookies disabled on browser side.

disabling http_authentication plugin doesn't end with this redirection loop. Instead, when cookies are disabled, you can't login and get the following message : "Invalid request! No data was saved." which is not very user-friendly to say "your cookies are disabled, please enable them to use roundcube"

maybe it would be interesting to detect such redirection_loop by adding a parameter (maybe redirect=1) to the redirection URL and ending up with a nice error message if this parameter is present and no cookie is available ?

regards,

S. Blaisot

Le 29/01/2013 20:43, Sébastien BLAISOT a écrit :

Hi,

I've juste noticed with RC 0.9b and RC 0.8.4 that when cookies are disabled on browser side (tested with FF and chrome), I get a redirection loop (302 redirect) on /?_task=mail

This is not very user-friendly, it would be better to show a nice error page.

Can somebody confirm what I've noted before I fill in a bug report or is it only related to my installation ?

regards,

S. Blaisot