Closed Bug 449189 Opened 16 years ago Closed 16 years ago

mozilla using same session object in different tabs or different windows

Categories

(Firefox :: Security, defect)

x86
Windows XP
defect
Not set
major

Tracking

()

RESOLVED DUPLICATE of bug 117222

People

(Reporter: Bmanoj.m, Unassigned)

Details

User-Agent:       Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 1.1.4322; InfoPath.1; .NET CLR 2.0.50727)
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.16) Gecko/20080702 Firefox/2.0.0.16

The problem with Firefox is that each window of Firefox on the same PC will send the very same session cookie to my server (unless I am able to specify  
separate profiles). I specify the URL of "application 1" it prompt me to enter Login Name and Password. After follows authentication and authorization, I  
successfully login in "application 1". Now I open Firefox window 2 and specify same URL as I entered at the starting of "application 1" Problem start here ->
even if I want to log on to "application 1" with different user and password, I am not able to do this. When I entered URL ,I directly redirect to  
"application 1" without prompting to enter User Name and Password.
But it is works in Microsoft IE.

     Rather than send a new cookie and have a second session file set up on my server, the Firefox sends the same cookie and "steals" the session file from  
the first application.

When opening a window or tab by using the "open in new window" or "open in new
tab" options when you right-click a link should keep you in the same session scope

With Internet Explorer, when you start a new IE window by clicking on the
program icon on your desktop, it starts with a completely different "session".


Reproducible: Always

Steps to Reproduce:
1.User uses Firefox and launched web applicarion on a one window
2.User launches new window(second window) with same web application URL.
3.User is launched into the web application without a login prompt. 
Actual Results:  
User is launched into the web application without a login prompt. 

Expected Results:  
When web application launches in new window it prompted for login.
Status: UNCONFIRMED → RESOLVED
Closed: 16 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.