Open
Bug 647005
Opened 13 years ago
Updated 2 years ago
warn_submit_insecure should trigger on ajax requests
Categories
(Firefox :: General, defect)
Tracking
()
NEW
People
(Reporter: panard, Unassigned)
References
()
Details
(Whiteboard: [bugday-20110401])
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:2.0) Gecko/20110322 Firefox/4.0 Build Identifier: Mozilla/5.0 (X11; Linux x86_64; rv:2.0) Gecko/20110322 Firefox/4.0 Having security.warn_submit_insecure set to true should trigger a warning when a site tries to submit data by doing an ajax request. Reproducible: Always Steps to Reproduce: 1. set security.warn_submit_insecure to true 2. goes on a website using ajax to submit data (like the URL specified in this BR) Actual Results: triggering an ajax request won't warn you. Expected Results: warning dialog.
Comment 1•13 years ago
|
||
Tested with that url and I can reproduce the bug Build: Mozilla/5.0 (X11; Linux x86_64; rv:2.2a1pre) Gecko/20110401 Firefox/4.2a1pre Build: Mozilla/5.0 (X11; Linux i686 on x86_64; rv:2.2a1pre) Gecko/20110401 Firefox/4.2a1pre
To be fair, I only agree with your opinion in the case of insecure ajax requests.
Status: UNCONFIRMED → NEW
Ever confirmed: true
Whiteboard: [bugday-20110401]
Updated•2 years ago
|
Severity: normal → S3
You need to log in
before you can comment on or make changes to this bug.
Description
•