116209 - logout from secure site leads to endless network activity

Status: RESOLVED DUPLICATE of bug 117507

(Core :: Networking, defect)

Description

[Arthur]

From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.6+) Gecko/20011219
BuildID:    2001121908 (0.9.7 branch)

If uo logout from the secure part of the above url, mozilla tries to connect to
quotes.ubs.com even when you've left the site long ago.

Reproducible: Always
Steps to Reproduce:
1. Go to http://quotes.ubs.com/
2. Choose 'Secure login' from the left link list.
3. login as 'mozilla' with password 'mozilla'
4. Choose 'Logout' from the left link list.
5. Wait until a new login dialog appears (several seconds)
6. Click 'ok' without entering any login information
7. Watch the status bar
8. Surf to other sites, http://www.mozilla.org/
9. Even open a new window with a different adress.


Actual Results:  Mozilla still tries to connect to quotes.ubs.com

Expected Results:  I'd say mozilla shouldn't try to connect to a site if the
user has left it.

I'm really not sure whether Networking is the right component.

Comment 1

[Arthur]

I just realized that opening a new window has only an effect when only one
window is open. I'm on a high end machine here and mozilla reacts very sluggish
after logging out. So watch out if you're on a slow machine.

Comment 2

[Arthur]

Also happening on Linux 2001121321 at home.
netstat shows:
Proto Recv-Q Send-Q Local Address           Foreign Address         State
tcp        0     72 my adress:33083    194.69.181.36:https     Connected
The Send-Q number changes from time to time.

Comment 3

[Arthur]

Symptoms go away if you choose "go offline".

Comment 4

[Boris Zbarsky [:bzbarsky]]

Sounds like a PSM issue...

Comment 5

[Randell Jesup [:jesup] (needinfo me)]

This is a significant issue; upping severity, adding perf.  This also could be a
serious bandwidth waster.

Comment 6

[John Unruh]

Assigning to browser:general. The same thing happens with an insecure login. I 
know this is a dupe, but I cannot find the bug after searching.

Comment 7

[Asa Dotzler [:asa]]

->networking

Comment 8

[Doug Turner (:dougt)]

over to darin.  

Comment 9

[Darin Fisher]

-> [e-mail]

Comment 10

[Vinay Badami]

Under step 5 when a new login dialog appears and u click ok without entering in
any information, a null username and password were being sent across. This was
resulting in a infinite number of requests being sent to the server and rejected
repeatedly with the null username passwd combination . There was a bug against
this that has already been fixed. Bug# 117507.

With this fix in place the behavior is that u will get prompted again. If u
click OK, the same thing repeats. If u cancel out, u get displayed the
unauthorized response that had come back. This is correct and expected behavior.

Marking as dup of that bug.

*** This bug has been marked as a duplicate of 117507 ***