1430454 - Console show unrelated blocked content from other tabs

Status: RESOLVED INCOMPLETE

(DevTools :: Console, defect, P1)

Description

[miki]

Attachment: Screenshot from 2018-01-14 11-41-01.png

User Agent: Mozilla/5.0 (X11; Fedora; Linux x86_64; rv:57.0) Gecko/20100101 Firefox/57.0
Build ID: 20180104170325

Steps to reproduce:

Had around 30 open tabs.
I opened a website and I clicked F5 while the Console is open.



Actual results:

The console reported that there are blocked items.
The problem is that those blocked items are originated from another tab with unrelated domain.

After restarting Firefox the problem disappeared.


Expected results:

Each tab should be isolated. Maybe there is a hole where its possible to exploit data from other tabs.

Comment 1

[miki]

The URL to page is https://www.infogan.co.il/page/uKaiqVxon2vEYzjhqs84mC

Comment 2

[miki]

It happened again.

Now the situation is:

* In the console there are blocked content
* Those content items are from different regular tab that was open 3 days ago.
* The current tab is a new incognito tab

Added screenshot

Comment 3

[miki]

Attachment: Screenshot from 2018-01-17 11-21-15.png

Incognito tab. Console show unrelated blocked items from different tab

Comment 4

[Andrew McCreight [:mccr8]]

It seems more likely that the console is just giving you a message about stuff it blocked previously, because it failed to clear some list or something.

Tanvi, do you know where this bug should go? Thanks.

Comment 5

[Tanvi Vyas[:tanvi]]

1) Is this bug because we are actually trying to load something from one top level load in another top level load? (Hopefully not)
2) Is this bug an issue in the developer tools where console messages from a previous page are being re-reported, or reported on the wrong pages?
3) Is this bug because the mixed content blocker is reporting messages to the wrong website. (This is very unlikely given the way the code works.)

Where this bug goes depends on the reason it is happening.  If I had to guess, I would say its 2).  In which case its a developer tool bug.  I would try to verify that 1) is not happening as soon as possible.

Comment 6

[Daniel Veditz [:dveditz]]

The same as whatever weirdness is going on in bug 1426207?

Comment 7

[Tanvi Vyas[:tanvi]]

Can we give this to the dev tools team to take a closer look?

Comment 8

[Patrick Brosset <:pbro>]

CC'ing Nicolas, the current console owner, so this bug shows on his radar.

Comment 9

[Nicolas Chevobbe [:nchevobbe]]

I know we had report in the past of mixed content blocked messages (and only them) being reported to another window - but without consistent way to reproduce.

miki, do you still see that issue, and if so, are there specific steps we can do to reproduce it ?

Comment 10

[Daniel Veditz [:dveditz]]

There's no evidence we're loading things from the wrong context (which might be a security problem) just that we're reporting incorrect information to the DevTools user about their own browsing. Doesn't need to be a hidden bug.

Comment 11

[miki]

(In reply to Nicolas Chevobbe [:nchevobbe] from comment #9)
> miki, do you still see that issue, and if so, are there specific steps we
> can do to reproduce it ?

Nope, cant reproduce it. Now I am on version 62

Comment 12

[Nicolas Chevobbe [:nchevobbe]]

since we didn't get any other report and we couldn't find a way to reproduce this, let's close the bug.
We'll reopen it if we encounter the issue again.