1455567 - Akamai dash player doesn't include get parameters when requesting video data in Firefox, but does do so in Chrome

Status: RESOLVED INVALID

(Firefox :: Untriaged, defect)

Description

[[e-mail]]

Attachment: Firefox_DashIssue.JPG

User Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:59.0) Gecko/20100101 Firefox/59.0
Build ID: 20180323154952

Steps to reproduce:

browsed the akamai manifest url with token


Actual results:

Akamai tokens are stripped for child manifest in firefox....


Expected results:

when tried same url in Chrome playback us successful an d tokens from child manifest are not striped.

Comment 1

[[e-mail]]

Attachment: Chrome_DashPlayback successful playback

Comment 2

[:Gijs (he/him)]

Clearly not a security bug. For this report to be actionable, how are these requests made? Are you sure this isn't just the dash player having a bug where it doesn't compose the request URL correctly in Firefox?

Comment 3

[[e-mail]]

Hello gijs,
   Thanks for response. We got update today from Akamai and it turned out to be issue at Akamai netsotrage configurations . Manifest streamed from Akamai for Firefox were not well formed and had stripped tokens for child manifest.
Thanks
Deepti