Steps to reproduce:
1. Log out of Launchpad 2. Go to https://bugs.launchpad.net/canonical-identity-provider/+bugs?field.searchtext=&orderby=-importance&search=Search&field.status:list=NEW&field.status:list=INCOMPLETE_WITH_RESPONSE&field.status:list=INCOMPLETE_WITHOUT_RESPONSE&field.status:list=CONFIRMED&field.status:list=TRIAGED&field.status:list=INPROGRESS&field.status:list=FIXCOMMITTED&assignee_option=any&field.assignee=&field.bug_reporter=&field.bug_supervisor=&field.bug_commenter=&field.subscriber=&field.tag=&field.tags_combinator=ANY&field.has_cve.used=&field.omit_dupes.used=&field.omit_dupes=on&field.affects_me.used=&field.has_patch.used=&field.has_branches.used=&field.has_branches=on&field.has_no_branches.used=&field.has_no_branches=on (or a similar URL with a long query string) 3. Attempt to log in from that page 4. See plain text <form> output on page
The same url with much of the irrelevant query string removed works fine (eg: https://bugs.launchpad.net/canonical-identity-provider/+bugs?field.searchtext=&orderby=-importance&search=Search) so the long query string appears to be the trigger for this.
Steps to reproduce:
1. Log out of Launchpad/bugs.launchpad.net/canonical-identity-provider/+bugs?field.searchtext=&orderby=-importance&search=Search&field.status:list=NEW&field.status:list=INCOMPLETE_WITH_RESPONSE&field.status:list=INCOMPLETE_WITHOUT_RESPONSE&field.status:list=CONFIRMED&field.status:list=TRIAGED&field.status:list=INPROGRESS&field.status:list=FIXCOMMITTED&assignee_option=any&field.assignee=&field.bug_reporter=&field.bug_supervisor=&field.bug_commenter=&field.subscriber=&field.tag=&field.tags_combinator=ANY&field.has_cve.used=&field.omit_dupes.used=&field.omit_dupes=on&field.affects_me.used=&field.has_patch.used=&field.has_branches.used=&field.has_branches=on&field.has_no_branches.used=&field.has_no_branches=on (or a similar URL with a long query string)
2. Go to https:/
3. Attempt to log in from that page
4. See plain text <form> output on page
The same url with much of the irrelevant query string removed works fine (eg: https://bugs.launchpad.net/canonical-identity-provider/+bugs?field.searchtext=&orderby=-importance&search=Search ) so the long query string appears to be the trigger for this.