130946 - Problem with lock icon

Status: VERIFIED WORKSFORME

(Core Graveyard :: Security: UI, defect, P1)

Description

[Stephane Saux]

To reproduce:
start browser
go to this bug.
use this link and do right click/open in new window https://freemail.web.de
The page loads but the lock icon is not set.

if you click on the link directly rather than right click then you get the lock
icon.

I found this bug while looking at bug 130794 which may or may not be related.

Comment 1

[David P. Drinan]

This works for me with the latest commercial daily builds. i'll try a mozilla
build next.

Comment 2

[jag (Peter Annema)]

This works for me both in a month old build (on linux) and a new one (with my
tabbrowser fixes) on Windows.

Comment 3

[Kai Engert [:KaiE:]]

I'm confused, because I do see the problem with both Linux and Windows.

Stephane, David, did you really do it exactly as Stephane described?

You MUST use "right-click-open-in-new-window" on https://freemail.web.de to see
the problem.

I agree it works correctly,
- if you click the link directly (left click)
- if you type the URL

Comment 4

[jag (Peter Annema)]

Still WFM on today's unpatched W2k build, with the exact steps kai reiterated.

Could this be debug vs optimized? Maybe different content is sent depending on
the country you're in? Did the document load completely finish? Last time I
tried it it took a while to finish loading the page due to one of the images (an
ad?).

Comment 5

[Stephane Saux]

I can still reproduce this.
Note that the ssl cert is issued by a certificate authority that netscape
doesn't recognize, and when I first load it I get the appropriate warning, but I
don't get the "loading a secure page" warning.

If I see the "loading a secure page" warning, then I will get the lock.

Comment 6

[Raphael Wegmann]

There is a severe problem with the security information connected to tabbed
browsing. When I have one https connection, I have the yellow lock in all tabs.
And when I take a look at the page information, I even get the information "High
grade security" even if I have a plain http connection in my tab. I'm using
Build 2002031321.

Comment 7

[jag (Peter Annema)]

Raphael, that's bug 101723.

Comment 8

[John Unruh]

Works for me with a special build from kaie. The patch is attached to bug 130949

Comment 9

[John Unruh]

Verified.