Closed Bug 1605863 Opened 6 years ago Closed 6 years ago

. htaccess Password Protection bypass

Categories

(Firefox :: Untriaged, defect)

71 Branch
defect
Not set
normal

Tracking

()

RESOLVED INVALID

People

(Reporter: guillot_julien, Unassigned)

Details

User Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0

Steps to reproduce:

1 - Open an URL that is password protected with an htacess file
2 - Close tab without logging in
3 - Reopen tab with ctrl+t

Actual results:

After tab was reopened, I was not requested to enter password and was able to access the data as if I was logged.

Expected results:

It should have asked me to enter login/password (it is working in Chrome)

Status: UNCONFIRMED → RESOLVED
Closed: 6 years ago
Resolution: --- → INVALID

It seems to be a cache issue, even through I cleared the cache before submitting the issue

Group: firefox-core-security
You need to log in before you can comment on or make changes to this bug.