Why your browser loses cookies when following hyperlinks from an Excel spreadsheet or Word document

Posted . Visible to the public.

Microsoft Office pre-fetches hyperlinks using an internal DLL Show archive.org snapshot (which doesn't know about your cookies), follows all redirects and opens your browser with the result. This is because of stupidity.

The "fix" is to not redirect but just render a text like "access denied" with 200 OK when you see that request.env['HTTP_USER_AGENT'].include?('ms-office').

Henning Koch
Last edit
License
Source code in this card is licensed under the MIT License.
Posted by Henning Koch to makandra dev (2012-12-18 17:34)