Open Bug 1638323 Opened 2 months ago Updated 2 months ago

Downloads for CORP-protected resources fail

Categories

(Core :: DOM: Core & HTML, defect)

Product:
Core
Component:
DOM: Core & HTML
Version:
78 Branch
Platform:
x86_64
Linux
Type:
defect

Tracking

()

People

(Reporter: bz, Unassigned)

Details

Attachments

(1 file)

dl_failed.png
8.95 KB, image/png
Details
Attached image dl_failed.png —

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Firefox/78.0

Steps to reproduce:

With reference to bug 1459573

  1. Clone https://github.com/lol768/corp-pdf-testcase and run the test server
  2. Navigate to http://localhost:8080
  3. Open main.pdf by clicking the link
  4. pdf.js will render the PDF
  5. Now attempt to download the PDF by clicking the download icon or using save-as

Actual results:

  1. Download fails, despite the download being initiated from (at least, from the user's perspective!) the same origin as to the one that the resource is served from

Expected results:

  1. Download succeeded

Correction:

Now attempt to download the PDF by clicking the download icon or using save-as

The former works, the latter fails.

Component: Untriaged → DOM: Core & HTML
OS: Unspecified → Linux
Product: Firefox → Core
Hardware: Unspecified → x86_64
Severity: -- → S3
You need to log in before you can comment on or make changes to this bug.