Closed Bug 151640 Opened 22 years ago Closed 22 years ago

under HTTPS referrer not sent to another HTTPS server

Categories

(Core :: Security, defect)

Product:
Core
Component:
Security
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

()

Status:
RESOLVED DUPLICATE of bug 141641

People

(Reporter: johns, Assigned: security-bugs)

References

(
URL
)

Details

From Bugzilla Helper:
User-Agent: Mozilla/4.0 
BuildID:    20010816 and later

While on an HHTPS page if an IMG tag exists points another HTTPS server a 
referrer is not sent. Should be no reason to restrict sending referrer to other 
HTTPS servers from an HTTPS page. Appears this bugid caused the problem 
http://bugzilla.mozilla.org/show_bug.cgi?id=89995

Reproducible: Always
Steps to Reproduce:
1. create an https server with an IMG tag hosted on another HTTPS server
2. browse to page, check detailed log of server hosting img

1. Go to https://www.geotrust.com under IE(or any older Netscape browser) 
notice icon on bottom left.
2) Go to https://www.geotrust.com undre newer Netscape browser, icon does not 
appear.

Actual Results:  Mozilla sends no referrer. No Icon is displayed.

Expected Results:  Mozilla should have sent referrer field to the other server. 
Icon should have been rendered.

This problem exists in Mozilla, and Netscape 6.2 and higher. All other browsers 
behave as expected.
Summary: under HTTPS referrer not sent to another HTTP server → under HTTPS referrer not sent to another HTTPS server

*** This bug has been marked as a duplicate of 141641 ***
Status: UNCONFIRMED → RESOLVED
Closed: 22 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.