155518 - No alert about sending unencrypted data in a new tab

Status: RESOLVED INVALID

(Tech Evangelism Graveyard :: English US, defect, P2)

Description

[Boris Bukh]

To reproduce:
1. Enable security alerts about sending unencrypted data
2. Go to http://www.google.com/
3a. Click on "Groups"
   or
3b. Click right button on "Groups" and select "Open in a New Tab"

Expected Results:
In both a) and b) a warning about sending unencrypted data should be shown.

Actual Results:
In a) there is a warning that unencrypted data is sent.
In b) there is no warning.

System info:
Windows 98 running Mozilla Build 20020628.

Comment 1

[Bill Mason]

Behavior verified in build 2002072204 PC/Win98.

Comment 2

[Mitchell Stoltz (not reading bugmail)]

->PSM. I think they own the unencrypted data warnings.

Comment 3

[Stephane Saux]

Kai

Comment 4

[Kai Engert [:KaiE:]]

There is no bug here. Let me explain.

The Google page is using some JavaScript tricks. If you had JavaScript disabled,
you would not see any security warnings.

The "Groups" wording is a multi purpose object.

- It contains a regular hyperlink.
  When you right click the groups object and instruct to open a new tab or
window, you are actually opening that hyperlink. You will see that a blank
search form will open. The data you had entered on the start page will not have
been transmitted to the new page
  It is correct that no submit warning is shown.

- when you left click with JavaScript disabled, the same thing happens

- if you left click with JavaScript enabled, JS logic is being activated. The
logic will actually submit your input and do a Groups search.

So we warn only when data is being submitted, and that is correct behaviour.

Marking worksforme. Please reopen if you disagree.


Over to Evangelism FYI.

Comment 5

[Kai Engert [:KaiE:]]

For some reason bugzilla cleared the summary when I updated the bug. I think it
was not me doing that :)
Adding back summary.

Comment 6

[John Unruh]

Reopen to reassign.

Comment 7

[John Unruh]

reassign

Comment 8

[Bob Clary [:bc] (inactive)]

invalid.

Comment 9

[Bob Clary [:bc] (inactive)]

tech evang june 2003 reorg