30271 - https: without trailing slash redirects cause broken-lock icon

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P3)

Description

[old account]

From my build 3/3/00, AM - 

If I go to an https page that does a redirect (i.e. one that redirects to the
same URL with a / on the end), I get a broken-lock icon.  If I type in the site
manually with a / on the end, I get the regular locked icon.  Sorry for not
giving an actual URL to see this with, but the one I saw it on is UIUC-internal.

Comment 1

[Doug Turner (:dougt)]

could you send me copies of these pages?

Comment 2

[old account]

To be more specific, this is a case where I type in:

https://www-courses.cs.uiuc.edu/~cs323

which redirects me to:

https://www-courses.cs.uiuc.edu/~cs323/

and the page displays properly, but gives a broken-lock icon.  Entering the
second URL manually brings up the page with a normal locked icon.  Note that
this URL is not publically accessible but it should also show up on other sites,
if anyone can find an example.

Comment 3

[Doug Turner (:dougt)]

can reproduce on "https://junruh/sstests".  If you do not put the trailing
seperator on the URL, the icon will be broken.  Investigating.

Comment 4

[Doug Turner (:dougt)]

basically what is happen is we are getting an OnEndURLLoad that status is socket 
aborted.  I spoke to gagan, and he said that once the httpEventSink lands, this 
problem should go away.

Comment 5

[Phil Peterson]

PDT-

Comment 6

[Doug Turner (:dougt)]

targeting m16.  If you reported this bug, and you would like to have it fixed 
sooner, please send me email.  I will see what I can do.  :-)

Comment 7

[Phil Peterson]

nsbeta2+

Comment 8

[John Unruh]

Reassigning to javi during dougt's absence for the next three weeks.

Comment 9

[Mike]

M16 has been out for a while now, these bugs target milestones need to be 
updated.

Comment 10

[leger]

Per today's PDT, moving from [nsbeta2+] to [nsbeta2-]

Comment 11

[John Unruh]

Changing platform to All.

Comment 12

[Daniel Veditz [:dveditz]]

Adding nsbeta2 keyword to bugs with nsbeta2 triage value in status field so the 
queries don't get screwed up

Comment 13

[Javier Delgadillo]

putting on nsbeta3+ radar. 

junruh, is this still happening?

Comment 14

[John Unruh]

Worksforme on the 8/15 Win32, Mac and Linux builds.

Comment 15

[John Unruh]

Verified.

Comment 16

[John Unruh]

Mass changing Security:Crypto to PSM

Comment 17

[John Unruh]

Mass changing Security:Crypto to PSM