Closed Bug 1515791 Opened 6 years ago Closed 6 years ago

Tab title not replaced when navigating from empty <title> TLS website to another empty <title> TLS website

Categories

(Firefox :: Tabbed Browser, defect)

64 Branch
defect
Not set
normal

Tracking

()

RESOLVED DUPLICATE of bug 1401091

People

(Reporter: bugzilla.mozilla.org, Unassigned)

Details

Dão, can you take a look?
Component: Untriaged → Tabbed Browser
Flags: needinfo?(dao+bmo)
(In reply to :Gijs (he/him) from comment #1) > Dão, can you take a look? FWIW, I can reproduce on 65 beta by just: 1. open a new tab 2. paste http://tor.eff.org in url bar, hit enter 3. wait for it to load and redirect to the https version 4. copy + paste http://torproject.net in url bar, hit enter
Thanks for reproducing. Please consider purging non-relevant details off my initial bug report before publishing. If this will be considered a security bug, please credit me using my full name (or whichever way you usually do). Thank you for your efforts.
I just tried to reproduce it using Gijs' simplified steps on Windows 7 with a fresh (unmodified) Firefox 64 (64-bit) installation + profile, no extensions, and could not - the tab title kept updating, ending up with "torproject.org/" (when the address bar showed "https://www.torproject.org/"). So this does seem to be at least somewhat environment specific.
I was in fact *not* able to reproduce it Gijs' way using the profile and environment I initially reported on - thanks for helping simplify it, though, Gijs! For me, with these steps, even in my much customized environment, the behavior is correct, like in comment 4. I can still reproduce this issue using the same environment *and* steps I discussed in the initial report. Will see if I can simplify it more.
I am able to reproduce on a blank profile on Ubuntu 18.10 (amd64) and Windows 7 (64-bit), both fully patched, both running 64-bit Firefox 64.0, by following these steps: 1. Create a new Firefox profile, start Firefox. Close all browser tabs but one. Access https://bugzilla.mozilla.org/show_bug.cgi?id=1515791#c6 (or any web page, accessed via http: or https: URI schemes (others untested), containing a web link as in step 3) 2. Press Ctrl-SHIFT-Delete and: - Select the time range of EVERYTHING - Tick all tick-boxes - Click on [Clear Now] 3. Right-click, open in new tab: https://tor.eff.org 4. Click on the location bar and edit the URL into "https://www.torproject.net" (without quotation marks) and press enter. 5. After loading the web page completes, note how the browser tab says "tor.eff.org/" while the address bar (correctly) states "https://www.torproject.org/" ----- Observations: A. Accessing the first Tor website by RMB-click on the link + "open in new tab" is a requirement to make this work reliably (i.e. after cleared cache). Opening the link in a new window breaks the ability to reproduce. B. The Tor website is rendered from this (simplified) HTML(5) source / document tree (as confirmed via curl): <!DOCTYPE html> <html> <head> .. <title></title> .. </head> <body> .. </body> </html> I assume the explicitly set empty TITLE attribute may be a factor in triggering this misbehavior.
(In reply to Moritz Naumann from comment #6) > 4. Click on the location bar and edit the URL into > "https://www.torproject.net" (without quotation marks) and press enter. > > 5. After loading the web page completes, note how the browser tab says > "tor.eff.org/" while the address bar (correctly) states > "https://www.torproject.org/" Sounds like bug 1401091 essentially.
Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Flags: needinfo?(dao+bmo)
Resolution: --- → DUPLICATE

hiding initial description per comment 3

Group: firefox-core-security
You need to log in before you can comment on or make changes to this bug.