On 7/21/11 11:51 PM, Mark Callow wrote: > Seems like a bug in the whitelist filter to me. Shouldn't the filter be > checking requests using the full URL just before they are dispatched? We're talking a filter on the HTML generation, not in the browser. -Boris