trysdyn wrote:
I am absolutely, 100% sure I did not receive a pop-up or any form of confirmation. The only config I have that could be a factor is I block Javascript. I suppose that could do it, but I'd think that would cause the reboot button to fail rather than just assume an affirmative answer to the popup?
Yep, that would do it. I'd have to check to be sure, but I suspect the Javascript is intercepting the button press (or the form submission event) to provide the confirmation dialog. If you disable Javascript, the interception never occurs so the default HTML form behavior takes over, and the button just submits the request immediately.
I suppose it could be architected so a submission if Javascript was disabled took you to a totally separate page to confirm the request with another button, but that's more work (in terms of structuring things so the server can detect both types of submissions) in support of what is a reasonably uncommon scenario of having Javascript disabled. You could just always have another full confirmation page and cover both cases that way, but that's not quite as fluid.
Given the tech audience of Linode, I suppose it wouldn't completely surprise me if the percentage of users with disabled (or more limited) Javascript may not be higher than usual, so suggesting that case be considered by Linode isn't necessarily that crazy. Or at least a warning on such pages if they detect Javascript is disabled.
In terms of an immediate practical implication to your original question, and assuming no changes on Linode's side, whitelisting Linode (or at least the dashboard page) to permit Javascript should at least protect you against the unexpected reboot scenario.
-- David