1211646 - 'view source' of an https page uses the lock icon until the page is refreshed

Status: RESOLVED DUPLICATE of bug 832834

(Firefox :: Security, defect, P3)

Description

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

STR:
1. visit an https page
2. view source (ctrl+u / right-click, "view page source")
3. the newly-opened tab re-uses the security indicators from the https page (i.e. the lock icon is still there and the location bar says "https://...")
4. hit refresh
5. the page now uses the globe icon and the location bar says "view-source://https://..."

Comment 1

[Tanvi Vyas[:tanvi]]

Yes, this behavior is odd.  And I'm not sure what it is supposed to be.

Also doing "view source" on https://people.mozilla.org/ and on https://www.google.com/calendar/b/1/render?pli= gives me different behavior.

On https://people.mozilla.org/, I click ctrl+u to get view source.  I see the lock icon in the location bar and in the control center.  I refresh and I get the globe in the url bar and the lock in the control center.

On https://www.google.com/calendar/b/1/render?pli=, I click ctrl+u to get view source.  I see the globe icon in the url bar.  I click control center and it says the domain is "...m/calendar/b/1/render?pli=" and shows the lock icon.  The actual domain name is mostly truncated.  And the location bar (globe) and control center (lock) don't match up.

This is odd behavior.

Comment 2

[Jawad Ahmed [:jawad]]

Hi, I cant reproduce this.

Comment 3

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

My guess is bug 832834 fixed it.