1628643 - The newly created vulnerable logins are not marked as vulnerable without refreshing the page after syncing logins on a new profile

Status: NEW

(Firefox :: about:logins, defect, P3)

Description

[Simona Rosu [:srosu], Ecosystem QA]

Attachment: vulnerableLofinsAfterSync.gif

[Affected versions]:

• Nightly 77.0a1 (Build ID: 20200408214238)
• Firefox Beta 76.0b2 (Build ID: 20200407205853)

[Affected Platforms]:

• Windows 10 x64
• Mac 10.14.6
• Ubuntu 18.04 x64

[Prerequisites]:

• Have a new Firefox profile.
• Be logged with a FxA account.
• Have at least one breached login.

[Steps to reproduce]:

1. Open the Firefox browser with the profile from prerequisites.
2. Navigate to the “about:logins” page.
3. Create at least one vulnerable login.
4. Sync the logins and close the browser.
5. Open a new Firefox profile and navigate to “about:logins”.
6. Sign in to sync.
7. Observe the vulnerable login created in step 3.

[Expected result]:

• The login is marked as vulnerable.

[Actual result]:

• The login is not marked as vulnerable.

[Notes]:

• The number increase of unmarked logins as vulnerable is directly proportional to the number of vulnerable logins created before syncing logins.
• The created login is correctly marked as vulnerable after refreshing the page.
• Attached a screen recording with the issue.

Comment 1

[ragimeg698]

The key to copy links is broken. It was broken in 88 and remains unfixed.

Copying links is a core function of a web browser. It is completely unreasonable that this function should be removed. Tens, maybe hundreds of millions of people use hotkeys. It is an absolutely normal, absolutely acceptable way to interface with a computer. All of those people have had to find solutions outside of Firefox, and for absolutely no reason.

A "replacement" key that is not physically usable is obviously not a replacement.

Since my legitimate reports about this critical bug are being removed, I'm leaving comments on other people's bugs.

Firefox currently has no hotkey to copy links.

Comment 2

[Sergey Galich [:serg]]

Moving to P3 as this is not happening in the next release cycle.