1129521 - Request to "crossorigin = anoymous" resource failed when using proxy with authentication

Status: UNCONFIRMED

(Core :: Networking: Proxy, defect, P5)

Description

[yoshiki]

User Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/40.0.2214.93 Safari/537.36

Steps to reproduce:

1. Enable HTTPS proxy with client certificate authentication.
2. Request https://www.facebook.com/ 


Actual results:

Facebook can be seen


Expected results:

Facebook can't be seen. It looks the JavaSctipt file which is specified "crossorigin = anoymous" can't be loaded correctly due to SSL authentication error of the proxy.

Comment 1

[Honza Bambas (:mayhemer)]

Seem to me a bit like incorrect proxy setting.  Forwarding to Patrick.

Comment 2

[Patrick McManus [:mcmanus]]

I'm confused. The problem is authenticating to the proxy, or the problem is with some piece of javascript? If its with the javascript, how did you get it if there is an authentication error?

Comment 3

[yoshiki]

The problem on facebook.com has been gone, because of the facebook site change. But the problem itself is still available. For example, it happens on https://messenger.com if I'm using a ssl proxy with client certificate authentication.

The messenger.com has the following tag. But request to that script via the proxy is failed due to crossorigin="anonymous".
<script src="https://static.xx.fbcdn.net/rsrc.php/v2/y2/r/ptYRCfe7Xf7.js" crossorigin="anonymous"></script>

Since the proxy requires authentication, so normal requests are with credential. But the above request is sent without credential and the proxy refuse to connect.

This problem is still available on the latest nightly 50.0a1 (2016-06-12).

Comment 4

[Firefox Bug Husbandry Bot]

Bulk change to priority: https://bugzilla.mozilla.org/show_bug.cgi?id=1399258

Comment 5

[BMO Automation]

Moving bug to Core/Networking: Proxy.