1400862 - ”Sign in” not working while using the webextension versions of Yahoo Mail Sidebar

Status: RESOLVED WORKSFORME

(WebExtensions :: Compatibility, defect, P5)

Description

[Vasilica Tamas, QA [:vtamas]]

Attachment: signin.gif

[Affected versions]:
Firefox 57.0a1 (20170917220255)
Firefox 56.0b12 (20170914024831)
Firefox 55.0.3 (20170824053622)

[Affected platforms]:
Windows 10 64-bit
Mac OS X 10.12.3


[Steps to reproduce]:
1.Launch Firefox Release with a clean profile.
2..Install one of the following extension versions:  
https://addons.mozilla.org/firefox/downloads/file/720526/yahoo_mail_sidebar-61.3-an+fx.xpi?src=version-history
https://addons.mozilla.org/firefox/downloads/file/718786/yahoo_mail_sidebar-61.1-an+fx.xpi?src=version-history
https://addons.mozilla.org/firefox/downloads/file/714646/yahoo_mail_sidebar-61.0-an+fx.xpi?src=version-history
4.Enter your email address and click “Next” button.

 
[Expected Results]:
The “Sign in” process continues with the next “Password” step.

[Actual Results]:
- Nothing happens when clicking on “Next” button.
- See screencast.
- This issue is not reproducible with the legacy version of the add-on: https://addons.mozilla.org/firefox/downloads/file/643633/yahoo_mail_sidebar-58.0-fx+sm.xpi?src=version-history

Comment 1

[Vasilica Tamas, QA [:vtamas]]

Baris, could you take a look at this issue?

Comment 2

[Baris Derin]

Thanks Vasilica.

I am not sure actually why the bug appears.

The add-on only tries to load

https://mail.yahoo.com

After you put your email and press Next button, Yahoo redirects the document to "https://login.yahoo.com"

Maybe this redirection is not allowed for WebExtension sidebars. @andym is it allowed to switch documents or domains in WE sidebars?

BTW, I find the WE Sidebars too restrictive. I can understand it is for security reasons but this way it is almost impossible to load even secure web pages like Yahoo Mail. If the web pages can not load properly in WE sidebars, it is against the sidebar purpose and the sidebar usage greatly diminish.

Yahoo Mail prevents itself to be loaded in a frame by "X-Frame-Options" header tag. I try to remove those header by extension but probably Yahoo detects the page is loaded in a sidebar iframe and prevents further execution by Javascript.

Previous legacy XUL version was using <browser> tag to load Yahoo mail in sidebar which did not have X-Frame-Options issue.

@andym is it possible to have <browser> equivalent in HTML sidebars? I know there is no such tag but is it possible have more elevated iframe loader but still keeping the security safe?

Comment 3

[Giorgia Nichita, Release Desktop QA]

Closing this as WFM as it is no longer reproducible with our latest nightly build 132.0a1 (2024-09-23) using Win 10 and macOS 11. After installing Yahoo Mail Sidebar extension the Sign in process continues with the Password step after clicking the "Next" button.