Comment 6 for bug 98437

This still happens to me with Zope 2.10 (3.3).

It is definitely not just a problem with pages just opened with browser.open(). In this case, I got to this page via a series of browser.getControl(...).click()'s, landing me on a page that checked HTTP_REFERER and indeed it's set to 'localhost'.

The test in question is at http://dev.plone.org/plone/browser/plone.app.contentrules/trunk/plone/app/contentrules/tests/multipublish.txt. The try... except block near the end is masking a 404 that results from a redirect that tries to go to a non-existing /localhost page.