1151255 - Network monitor returns misleading content on Unauthorized pages

Status: UNCONFIRMED

(DevTools :: Netmonitor, defect)

Description

[killerchip0]

Attachment: bug_submit_files.zip

User Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:37.0) Gecko/20100101 Firefox/37.0
Build ID: 20150402191859

Steps to reproduce:

Created a PHP webpage that requests Basic Authentication when username or password is not submitted (see my attached webpage).

The page returns in body a 'please authenticate' message and 401 Unauthorized status, to trigger basic authentication.

When the user enters username/password (any username/password) the page returns actual HTML page content (see attached script).


Actual results:

Firefox Network monitor shows in the Response body of the 'Unauthorized' request the actual body of the subsequent 'authorized' request and not the message 'please authenticate'. (see attached 'misleading.png')

While taking a network capture, I saw that my script and server indeed did not return the HTML page but the 'please authenticate' message as expected. (see attached p80.pcap wireshark capture)


Expected results:

The network monitor should have return in the 'Unauthorized' response body the 'please authenticate' message and not the HTML page.

I think it is a bug that misleads developer into thinking his PHP script is wrong.