Unfortunately, the site is a secure site
with logon and since the target is a server-side asp script, it wouldn't do you much good to give you access to the client side. The button click just fires a js to run logout.asp
on the server. Here is some background info:
1 Site has 12 iframes.
2. User logs on
3. During logon, a page in an iframe is built with form that
has logoff info
4. Top page has
onload="windows.addEventListener("beforeunload", Cleanup"
5. Cleanup function clicks the button to submit the form with
the logoff info (method="get" action="logout.asp")
6. Server-side logoff.asp script hits DB and removes their
info.
I tried to build a page for you that shows the problem, but it
worked fine, of course. My server is Windows Server 2016 w / IIS
10.0. However in troubleshooting that page and comparing logs to
my failing site, I noticed in the IIS logs that when it works:
I had just Reset Chrome which clears
the cache.
I see "GET"s with my names for pages (ie
"/webcas.exe/color_global.asp")
I see a "GET" for logout.asp in the
log.
Worked correctly.
When it fails, in the IIS logs:
I have just restarted Chrome. We
should have a cache now.
I see "GET" references to my pages but instead of my names,
they show "/webcas.exe/#" where the # is a digit (1,2,3). I assume this means it resolved it from the cache.
I see no entry for logout.asp
which means the button click failed for some reason.
It is not a "Blocked alert" since I have no alert, prompt, or
confirm.
It is not an Extension, so Content Policy should not come into
play.
From the IIS logs, it looks like it works when there is no cache
and it fails when there is a cache.
John