Do you want to leave this site?

[phoebebright]

Have installed session security as per instructions with default values. In my system many of may page changes are via javascript with document.location.href = next;

Have tried both "http://domain/etc/123" and "/etc/123" and both trigger the "Do you want to leave this site" dialog.

The pages have little forms, like a search box and I tried removing them but this had no effect.

Reverted to version before adding session security and dialog stopped coming up.

Do you have any suggestions off what is triggering the dialog?

[jpic]

It would be great if you could create a demo project because I have no idea :)

[phoebebright]

It's a monster project so trying to cut it down will take some time. Will try a few different things and see if I can narrow it down.

[jpic]

Could you try to reproduce from an empty project ?

[jarommadsen]

I've reproduced this as well. In our case it comes from pages with django forms. In some cases this is fine but on pages where those forms are filters for tables it becomes pretty annoying. There is actually already functionality built in for fixing this though it's pretty well hidden in the documentation on page 17 using this option:

{% include 'session_security/all.html' %}
<script>
sessionSecurity.confirmFormDiscard = undefined;
</script>

[jpic]

Could you suggest a better way to document it in a PR ?