search

ttilsa / jspwiki-project-group22

Apache JSPWiki is a leading open source WikiWiki engine, feature-rich and built around standard JEE components (Java, servlets, JSP)
https://jspwiki.apache.org/
Apache License 2.0
0 stars 0 forks source link

Wiki pages don't allow cookies to be rejected #3

Open mntandy opened 3 years ago

mntandy commented 3 years ago

The wiki pages pop up a message about cookies.

However there is no option to reject cookies, and it looks like some cookies are set before the user agrees to the use of cookies.

Juan Pablo Santos Rodríguez added a comment - 21/Sep/19 12:06 - edited JSPWiki stores user's preferences on a cookie, so that's needed by JSPWiki in order to behave as intended. The rest of the cookies (right now, only one controlling if we show or not the pop up) can be deleted on the User Preferences page. That's explained on the Cookie policy page, which is linked on the pop up, so may be we can fix this issue just by modifying the text on the pop up to make this more clear? F.ex. changing the text on the button from "Agree to the use of cookies", to "Ok, understood"

Permalink sebb Sebb added a comment - 21/Sep/19 13:27 Surely the preference cookie should only be created once the user has indicated a preference? On the first visit, no cookie will be presented by the browser, so JSPWiki must be able to handle that.

I think there are 3 possible scenarios:

user refuses all cookies; JSPWiki will show the dialog each time (as there is no record of the user response) user wishes to opt out of cookies; JSPWiki should explain that a single cookie will be saved to record this fact user allows all cookies

ttilsa commented 3 years ago

The cookie GUI dialogue is a 3rd party implementation unrelated to the project. JSPWIKI api has now functionality to reject cookies.

ttilsa commented 3 years ago

After investigation the issue looks to be complex. Very large portion of jspwiki functionality depends on cookies. Modifications might cascade into big part of the codebase.