blocks|key|1060269|text|我怀疑这是您如何设置cookie的问题。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060270|由于web创建方式的本质，example.com与www.example.com不是同一个域；因此:您可以登录到www.example.com，而不是登录到example.com。|offset|length|style|CODE|1060271|因此，换句话说，检查您的word或excel文件中的URL+-它是否与您在浏览器中登录的域相同？|1060272|有两个修复/解决方案来解决这个cookie不一致的问题:+1.重定向任何试图在没有www的情况下加载您的站点的人。到与www相同的页面。(反之亦然)，或者2.设置cookie时，请确保将域参数指定为".example.com“。前导点表示cookie在该域的所有子域上也应该有效。|1060273|我怀疑浏览器最终识别它的原因是因为您最终可能最终登录到一个与您登录时具有相同域结构的URL。|1060274|希望这能有所帮助。|1060275|entityMap^0|0|P|F|1K|F|26|B|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|S|8|@$D|T|E|U|F|G]|$D|V|E|W|F|G]|$D|X|E|Y|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|Z|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|10|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|11|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|12|8|@]|9|@]|A|$]]|$1|P|3|-4|5|6|7|13|8|@]|9|@]|A|$]]]|Q|$]]

I suspect this is a matter of how you are setting the cookie(s).

Due to the nature of how the web was created, example.com is not seen as the same domain as <code>www.example.com</code>; hence: you can be logged in at <code>www.example.com</code> and not logged in at <code>example.com</code>.

So in other words, check the URL in your word or excel file - is it the same domain as how you are logged in within your browser?

There are two fixes/solutions to this cookie inconsistency:
1. redirect anyone who tries to load your site without the www. to the same page with the www. (or vice versa), or
2. when you are setting the cookie, make sure to specify the domain argument as ".example.com". The leading dot indicates the cookie should be valid on all subdomains of that domain as well.

I suspect the reason the browser eventually recognizes it is because you probably eventually end up landing on a URL with the same domain structure as how you are logged in.

Hope this helps.

blocks|key|1060355|text|这是因为MS+Office正在使用Hlink.dll组件来查找链接是Office文档还是其他什么。MS+Office希望在不借助外部浏览器(使用IE6的Hlink.dll组件)的情况下打开链接在文档中的文档。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060356|如果会话cookie保护网站，Hlink自然会被重定向到登录页面，并已到达HTML页面，无法“理解”它在外部浏览器中打开它。请注意，它打开的不是原始URL+(预期行为)，而是重定向的结果，即使是302重定向。|1060357|微软在不支持的组件(Hlink.dll)中有这个错误，而不是认识到他们turn+it+over+to+our+head的错误(试图说服我们，这是我们使用的单点登录系统的缺陷，即会话cookie)，并拒绝升级它。它提供了MS+Office的workaround+that+turns+off+the+lookup+functionality：|offset|length|1060358|HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
++Office\9.0\Common\Internet\ForceShellExecute:DWORD=1|code-block|syntax|javascript|1060359|或者向我们提供服务器端的变通方法，以避免HTTP重定向和更改为Javascript重定向或元刷新重定向(即让Hlink获取原始URL上的text/html页面，并使其运行外部浏览器来处理它)。|1060360|entityMap|0|LINK|mutability|MUTABLE|url|http://support.microsoft.com/kb/899927|1|http://support.microsoft.com/kb/218153^0|0|0|Z|O|0|3B|1E|1|0|0|0^^$0|@$1|2|3|4|5|6|7|Y|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Z|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@$F|11|G|12|1|13]|$F|14|G|15|1|16]]|A|$]]|$1|H|3|I|5|J|7|17|8|@]|9|@]|A|$K|L]]|$1|M|3|N|5|6|7|18|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]|W|$5|R|S|T|A|$U|X]]]]

This is because MS Office is using Hlink.dll component to lookup if the link is Office document or something else. MS Office expect to open the document linked within documents without the aid of external browser (using Hlink.dll component of IE6).

If session cookie protects website Hlink naturally is being redirected to login page and having reached HTML page and not able to "understand" it opens it in external browser. Note that it opens not original URL (expected behavior) but the result of redirect, even if it was 302 redirect.

Microsoft has that bug in unsupported component (Hlink.dll), instead of recognizing the bug they <a href="http://support.microsoft.com/kb/899927" rel="noreferrer">turn it over to our head</a> (trying to convince us that it is flaw of SSO system we use, i.e. session cookies) and refuses to upgrade it. It offers <a href="http://support.microsoft.com/kb/218153" rel="noreferrer">workaround that turns off the lookup functionality</a> of MS Office:

<pre><code>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
 Office\9.0\Common\Internet\ForceShellExecute:DWORD=1
</code></pre>

Or offer us to workaround serverside, to avoid HTTP redirects and change into Javascript redirects or META REFRESH redirects (i.e. to have Hlink get text/html page on original URL and make it run external browser to handle it).

blocks|key|1060445|text|这是我在WordPress中的解决方案。将其添加到主题或其他插件文件中的functions.php中。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060446|这可能是有帮助的，如果您的系统，如可湿性粉剂，发送已登出的用户登录页面重定向到他们试图访问的页面。Word正在将用户发送到此页面，但WP无法正确处理用户已登录的情况。此代码检查是否存在当前用户以及是否传递了redirect_to参数。如果是，它将重定向到redirect_to位置。|1060447|function+my_logged_in_redirect_to()
{
global+$current_user;

if($current_user->ID+&&+$_REQUEST['redirect_to'])
{+++++++++++
++++wp_redirect($_REQUEST['redirect_to']);
++++exit;
}
}
add_action('wp',+'my_logged_in_redirect_to');|code-block|syntax|javascript|1060448|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Here is my solution for this in WordPress. Add this to functions.php in your theme or another plugin file. 

This may be helpful if your system, like WP, sends logged out users to a login page with a redirect to the page they were trying to access. Word was sending users to this page, but then WP wasn't properly handling the case where a user was already logged in. This code checks if there is a current user and a redirect_to param passed. If so, it redirects to the redirect_to location.

<pre><code>function my_logged_in_redirect_to()
{
global $current_user;

if($current_user-&gt;ID &amp;&amp; $_REQUEST['redirect_to'])
{ 
 wp_redirect($_REQUEST['redirect_to']);
 exit;
}
}
add_action('wp', 'my_logged_in_redirect_to');
</code></pre>

blocks|key|1060492|text|1.从excel/word指向http://example.com/from_excel.php|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1060493|2.在"from_excel.php“中，重定向到使用会话的页面|1060494|<script>document.location.href+=+"http://example.com/page_with_session.php";+</script>|code-block|syntax|javascript|1060495|entityMap|0|LINK|mutability|MUTABLE|url|http://example.com/from_excel.php^0|F|X|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]]|C|$]]|$1|D|3|E|5|6|7|W|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|C|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|C|$]]]|L|$M|$5|N|O|P|C|$Q|R]]]]

1.From excel/word point to <a href="http://example.com/from_excel.php" rel="nofollow">http://example.com/from_excel.php</a> 

2.In "from_excel.php" redirect to page where you use session

<pre><code>&lt;script&gt;document.location.href = "http://example.com/page_with_session.php"; &lt;/script&gt;
</code></pre>

blocks|key|1060568|text|针对VB.NET的修复：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060569|Dim+userAgent+As+String+=+System.Web.HttpContext.Current.Request.UserAgent

If+userAgent.Contains("Word")+Or+userAgent.Contains("Excel")+Or+userAgent.Contains("PowerPoint")+Or+userAgent.Contains("ms-office")+Then
+++++++System.Web.HttpContext.Current.Response.Clear()
+++++++System.Web.HttpContext.Current.Response.Write("<html><head><meta+http-equiv='refresh'+content='0'/></head><body></body></html>")
+++++++System.Web.HttpContext.Current.Response.End()
End+If|code-block|syntax|javascript|1060570|它基本上强制浏览器刷新页面，因此请求通过浏览器的用户代理和所有正确的cookie进入。|1060571|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

Fix for VB.NET:

<pre><code>Dim userAgent As String = System.Web.HttpContext.Current.Request.UserAgent

If userAgent.Contains("Word") Or userAgent.Contains("Excel") Or userAgent.Contains("PowerPoint") Or userAgent.Contains("ms-office") Then
 System.Web.HttpContext.Current.Response.Clear()
 System.Web.HttpContext.Current.Response.Write("&lt;html&gt;&lt;head&gt;&lt;meta http-equiv='refresh' content='0'/&gt;&lt;/head&gt;&lt;body&gt;&lt;/body&gt;&lt;/html&gt;")
 System.Web.HttpContext.Current.Response.End()
End If
</code></pre>

It basically forces the browser to refresh the page, so the request comes in with the user agent of the browser and all the correct cookies.

blocks|key|1060609|text|这是一个基于上面spilliton的答案的C#+ASP.NET的解决方案。在Global.asax.cs中，添加以下内容：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060610|++++private+static+string+MSUserAgentsRegex+=+@"[%5E\w](Word%7CExcel%7CPowerPoint%7Cms-office)([%5E\w]%7C\z)";
++++protected+void+Application_OnPostAuthenticateRequest(object+sender,+EventArgs+e)
++++{
++++++++if+(System.Text.RegularExpressions.Regex.IsMatch(Request.UserAgent,+MSUserAgentsRegex))
++++++++{
++++++++++++Response.Write("<html><head><meta+http-equiv='refresh'+content='0'/></head><body></body></html>");
++++++++++++Response.End();
++++++++}
++++}|code-block|syntax|javascript|1060611|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here is a solution for C# ASP.NET based on spilliton's answer above. In Global.asax.cs, add the following:

<pre><code> private static string MSUserAgentsRegex = @"[^\w](Word|Excel|PowerPoint|ms-office)([^\w]|\z)";
 protected void Application_OnPostAuthenticateRequest(object sender, EventArgs e)
 {
 if (System.Text.RegularExpressions.Regex.IsMatch(Request.UserAgent, MSUserAgentsRegex))
 {
 Response.Write("&lt;html&gt;&lt;head&gt;&lt;meta http-equiv='refresh' content='0'/&gt;&lt;/head&gt;&lt;body&gt;&lt;/body&gt;&lt;/html&gt;");
 Response.End();
 }
 }
</code></pre>

blocks|key|1060649|text|PHP解决方案：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060650|这阻止了MS产品识别该重定向。因此，MS从所需的链接启动浏览器。|1060651|if+(isset($_SERVER['HTTP_USER_AGENT']))
{
++++$http_user_agent+=+$_SERVER['HTTP_USER_AGENT'];+
++++if+(preg_match('/Word%7CExcel%7CPowerPoint%7Cms-office/i',+$http_user_agent))+
++++{
++++++++//+Prevent+MS+office+products+detecting+the+upcoming+re-direct+..+forces+them+to+launch+the+browser+to+this+link
++++++++die();
++++}
}|code-block|syntax|javascript|1060652|。。在此代码之后重定向|1060653|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|N|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|O|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

PHP solution:

This prevents the MS product recognising the redirect. MS therefore launches a browser from the required link.

<pre><code>if (isset($_SERVER['HTTP_USER_AGENT']))
{
 $http_user_agent = $_SERVER['HTTP_USER_AGENT']; 
 if (preg_match('/Word|Excel|PowerPoint|ms-office/i', $http_user_agent)) 
 {
 // Prevent MS office products detecting the upcoming re-direct .. forces them to launch the browser to this link
 die();
 }
}
</code></pre>

.. redirect after this code

blocks|key|1275412|text|我不得不为ASP.NET站点解决这个问题，但我只想使用javascript/+jQuery：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1275413|var+isCoBrowse+=+('<%25=+Session["user"].ToString().ToLower()+%25>'+!=+'0');
if+(isCoBrowse+&&+window.location.href.indexOf('ReturnUrl=')+>=+0+&&+window.location.href.indexOf('dllCheq')+==+-1)+{
++++//redirect+to+the+ReturnUrl+&+add+dllCheq+to+the+URI
++++var+toRedirect+=+decodeURIComponent(gup('ReturnUrl',+window.location.href))+%2B+'&dllCheq';
++++window.location+=+toRedirect;
}|code-block|syntax|javascript|1275414|我从How+to+get+the+value+from+the+URL+parameter?获得了gup函数|offset|length|1275415|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/979975/how-to-get-the-value-from-the-url-parameter^0|0|0|2|18|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

I had to solve this issue for an ASP.NET site but I only wanted to use javascript/ jQuery:

<pre><code>var isCoBrowse = ('&lt;%= Session["user"].ToString().ToLower() %&gt;' != '0');
if (isCoBrowse &amp;&amp; window.location.href.indexOf('ReturnUrl=') &gt;= 0 &amp;&amp; window.location.href.indexOf('dllCheq') == -1) {
 //redirect to the ReturnUrl &amp; add dllCheq to the URI
 var toRedirect = decodeURIComponent(gup('ReturnUrl', window.location.href)) + '&amp;dllCheq';
 window.location = toRedirect;
}
</code></pre>

I got the gup function from:
<a href="https://stackoverflow.com/questions/979975/how-to-get-the-value-from-the-url-parameter">How to get the value from the URL parameter?</a>

blocks|key|1060717|text|请使用microsoft提供的修复程序，如下所示。https://support.microsoft.com/en-us/kb/218153|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1060718|entityMap|0|LINK|mutability|MUTABLE|url|https://support.microsoft.com/en-us/kb/218153^0|P|19|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

Use fix provided by microsoft given link below. <a href="https://support.microsoft.com/en-us/kb/218153" rel="nofollow">https://support.microsoft.com/en-us/kb/218153</a>

blocks|key|1275450|text|在服务器端，这对我在IIS中有效(使用重写规则)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1275451|<rule+name="WordBypass"+enabled="true"+stopProcessing="true">
++++<match+url=".*"+/>
++++<conditions>
++++++++<add+input="{HTTP_USER_AGENT}"+pattern="Word%7CExcel%7CPowerPoint%7Cms-office"+/>
++++</conditions>
++++<action+type="CustomResponse"+statusCode="200"+statusReason="Refresh"+statusDescription="Refresh"+/>
</rule>|code-block|syntax|javascript|1275452|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Server side this worked for me in IIS (using a rewrite rule)

<pre><code>&lt;rule name="WordBypass" enabled="true" stopProcessing="true"&gt;
 &lt;match url=".*" /&gt;
 &lt;conditions&gt;
 &lt;add input="{HTTP_USER_AGENT}" pattern="Word|Excel|PowerPoint|ms-office" /&gt;
 &lt;/conditions&gt;
 &lt;action type="CustomResponse" statusCode="200" statusReason="Refresh" statusDescription="Refresh" /&gt;
&lt;/rule&gt;
</code></pre>

blocks|key|1060764|text|我不敢相信他们把这叫做功能。不过，这里有一个针对Apache的功能修复：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060765|RewriteEngine+On

#+Send+a+200+to+MS+Office+so+it+just+hands+over+control+to+the+browser
#+It+does+not+use+existing+session+cookies+and+would+be+redirected+to+the+login+page+otherwise
#+https://www.wimpyprogrammer.com/microsoft-office-link-pre-fetching-and-single-sign-on/

RewriteCond+%25{HTTP_USER_AGENT}+;\sms-office(\)%7C;)
RewriteRule+.*+-+[R=200,L]|code-block|syntax|javascript|1060766|这可能不是最佳的性能，因为发送的是整个页面，而不是空响应，但是我不想添加另一个Apache模块来修复这种idio%5EH%5EH特性。|1060767|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|L|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|M|8|@]|9|@]|A|$]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

I can't believe they call this a feature.
However, here's a featurefix for Apache:

<pre><code>RewriteEngine On

# Send a 200 to MS Office so it just hands over control to the browser
# It does not use existing session cookies and would be redirected to the login page otherwise
# https://www.wimpyprogrammer.com/microsoft-office-link-pre-fetching-and-single-sign-on/

RewriteCond %{HTTP_USER_AGENT} ;\sms-office(\)|;)
RewriteRule .* - [R=200,L]
</code></pre>

Might not be best performance wise, as the whole page gets sent instead of an empty response, but I did not want to add another Apache modules just for fixing such an idio^H^H^H^H feature.

blocks|key|1060795|text|下面是如何通过过滤器在Java和Spring中解决这个问题：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060796|/**
+*+To+see+why+this+is+necessary,+check+out+this+page:
+*+https://support.microsoft.com/en-gb/help/899927.
+*/
public+class+MicrosoftFilter+extends+OncePerRequestFilter+{
++@Override
++protected+void+doFilterInternal(final+HttpServletRequest+request,
++++++final+HttpServletResponse+response,
++++++final+FilterChain+filterChain)+throws+ServletException,+IOException+{
++++//Serve+up+a+blank+page+to+anything+with+a+Microsoft+Office+user+agent,+forcing+it+to+open+the
++++//URL+in+a+browser+instead+of+trying+to+pre-fetch+it,+getting+redirected+to+SSO,+and+losing
++++//the+path+of+the+original+link.
++++if+(!request.getHeader("User-Agent").contains("ms-office"))+{
++++++filterChain.doFilter(request,+response);
++++}
++}
}

/**
+*+Security+configuration.
+*/
@Configuration
public+class+SecurityConfiguration+{
++@Bean
++public+FilterRegistrationBean+microsoftFilterRegistrationBean()+{
++++FilterRegistrationBean<MicrosoftFilter>+registrationBean+=+new+FilterRegistrationBean<>();
++++registrationBean.setFilter(new+MicrosoftFilter());
++++registrationBean.setOrder(Ordered.HIGHEST_PRECEDENCE);
++++return+registrationBean;
++}
}|code-block|syntax|javascript|1060797|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here is how to workaround this with Java and Spring via a Filter:

<pre class="lang-java prettyprint-override"><code>/**
 * To see why this is necessary, check out this page:
 * https://support.microsoft.com/en-gb/help/899927.
 */
public class MicrosoftFilter extends OncePerRequestFilter {
 @Override
 protected void doFilterInternal(final HttpServletRequest request,
 final HttpServletResponse response,
 final FilterChain filterChain) throws ServletException, IOException {
 //Serve up a blank page to anything with a Microsoft Office user agent, forcing it to open the
 //URL in a browser instead of trying to pre-fetch it, getting redirected to SSO, and losing
 //the path of the original link.
 if (!request.getHeader("User-Agent").contains("ms-office")) {
 filterChain.doFilter(request, response);
 }
 }
}

/**
 * Security configuration.
 */
@Configuration
public class SecurityConfiguration {
 @Bean
 public FilterRegistrationBean microsoftFilterRegistrationBean() {
 FilterRegistrationBean&lt;MicrosoftFilter&gt; registrationBean = new FilterRegistrationBean&lt;&gt;();
 registrationBean.setFilter(new MicrosoftFilter());
 registrationBean.setOrder(Ordered.HIGHEST_PRECEDENCE);
 return registrationBean;
 }
}
</code></pre>

blocks|key|1275504|text|我们看到一个问题，当点击MS+Word中的网址时，会打开两个Chrome标签页，并且要打开的页面有JavaScript重定向：window.location.href=blabla|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1275505|通过从服务器端调试，我们确认除了Chrome之外，还有来自Office应用程序的请求。这太奇怪了。|1275506|但不管怎样，通过检查请求头"User-Agent"，并向Office应用程序返回一个空页面，我们的两个选项卡问题就解决了。这绝对是正确的做法！|1275507|entityMap^0|1R|R|0|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@$9|M|A|N|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|O|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|P|8|@]|D|@]|E|$]]|$1|J|3|-4|5|6|7|Q|8|@]|D|@]|E|$]]]|K|$]]

We are seeing a problem that TWO Chrome tabs are opened when clicking an URL from MS Word, and the page to open has JavaScript redirection: <code>window.location.href=blabla</code>

By debugging from the servers side, we confirmed that there are requests sent from Office app, besides Chrome. This is so wierd.

But anyway, by checking the request header "User-Agent", and returning an empty page to Office apps, our TWO tabs issue got resolved. That's definitely the right thing to do!

blocks|key|1275532|text|以下是使用dotnet核心中间件进行修复的示例：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1275533|public+class+MicrosoftOfficeLinksHandlingMiddleware
{
++++private+static+readonly+Regex+MsUserAgentsRegex+=+new+Regex(@"[%5E\w](Word%7CExcel%7CPowerPoint%7Cms-office)([%5E\w]%7C\z)");
++++private+readonly+RequestDelegate+_next;

++++public+MicrosoftOfficeLinksHandlingMiddleware(RequestDelegate+next)
++++{
++++++++_next+=+next;
++++}

++++public+async+Task+Invoke(HttpContext+context)
++++{
++++++++string+userAgent+=+context.Request.Headers["User-Agent"].FirstOrDefault();

++++++++if+(userAgent+!=+null+&&+MsUserAgentsRegex.IsMatch(userAgent))
++++++++{
++++++++++++//+just+return+an+empty+response+to+the+office+agent
++++++++++++return;
++++++++}

++++++++await+_next(context);
++++}
}|code-block|syntax|javascript|1275534|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Here is an example of the fix using a dotnet core middleware:

<pre class="lang-cs prettyprint-override"><code>public class MicrosoftOfficeLinksHandlingMiddleware
{
 private static readonly Regex MsUserAgentsRegex = new Regex(@"[^\w](Word|Excel|PowerPoint|ms-office)([^\w]|\z)");
 private readonly RequestDelegate _next;

 public MicrosoftOfficeLinksHandlingMiddleware(RequestDelegate next)
 {
 _next = next;
 }

 public async Task Invoke(HttpContext context)
 {
 string userAgent = context.Request.Headers["User-Agent"].FirstOrDefault();

 if (userAgent != null &amp;&amp; MsUserAgentsRegex.IsMatch(userAgent))
 {
 // just return an empty response to the office agent
 return;
 }

 await _next(context);
 }
}
</code></pre>

blocks|key|1275562|text|NGINX解决方案如下：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1275563|if+($http_user_agent+~*+Word%7CExcel%7CPowerPoint%7Cms-office)+{
++++return+200+'<html><head><meta+http-equiv="refresh"+content="0"/></head><body></body></html>';
}|code-block|syntax|javascript|1275564|您可以将其放在server或location块中。很有魅力。|offset|length|style|CODE|1275565|entityMap^0|0|0|7|6|E|8|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]|$I|T|J|U|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|N|$]]

NGINX solution below:

<pre><code>if ($http_user_agent ~* Word|Excel|PowerPoint|ms-office) {
 return 200 '&lt;html&gt;&lt;head&gt;&lt;meta http-equiv="refresh" content="0"/&gt;&lt;/head&gt;&lt;body&gt;&lt;/body&gt;&lt;/html&gt;';
}
</code></pre>

You can put it in the <code>server</code> or <code>location</code> block.
Works like charm.

blocks|key|1060894|text|在ColdFusion+/+Lucee中|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1060895|<cfif+cgi.HTTP_USER_AGENT+contains+"Excel"+OR+cgi.HTTP_USER_AGENT+contains+"ms-office">
++++<cfabort/>
</cfif>|code-block|syntax|javascript|1060896|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

And in ColdFusion / Lucee
<pre><code>&lt;cfif cgi.HTTP_USER_AGENT contains &quot;Excel&quot; OR cgi.HTTP_USER_AGENT contains &quot;ms-office&quot;&gt;
 &lt;cfabort/&gt;
&lt;/cfif&gt;
</code></pre>

I noticed that when a link is clicked externally from the web browser, such as from Excel or Word, that my session cookie is initially unrecognized, even if the link opens up in a new tab of the same browser window.

The browser ends up recognizing its cookie eventually, but I am puzzled as to why that initial link from Excel or Word doesn't work. To make it even more challenging, clicking a link works fine from Outlook.

Does anybody know why this might be happening? I'm using the Zend Framework with PHP 5.3.

Why are cookies unrecognized when a link is clicked from an external source (i.e. Excel, Word, etc...)

单点登录

中间件

服务器

WordPress

jQuery

Java

我注意到，当从web浏览器外部单击某个链接时，即使该链接在同一浏览器窗口的新选项卡中打开，我的会话cookie最初也无法识别。浏览器最终会识别它的cookie，但我不明白为什么来自Excel或Word的初始链接不起作用。为了使其更具挑战性，在Outlook中单击链接可以很好地工作。有人知道为什么会发生这种情况吗？我在P...

问为什么在单击外部源(如Excel、Word等)的链接时无法识别cookies？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问为什么在单击外部源(如Excel、Word等)的链接时无法识别cookies？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问为什么在单击外部源(如Excel、Word等)的链接时无法识别cookies？
EN